CVE-2017-1000061
- Source
- https://cve.org/CVERecord?id=CVE-2017-1000061
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-1000061.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2017-1000061
- Downstream
- Related
- Published
- 2017-07-17T13:18:17.923Z
- Modified
- 2025-11-20T10:33:26.352387Z
- Severity
-
- 7.1 (High) CVSS_V3 - CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H CVSS Calculator
- Summary
- [none]
- Details
-
xmlsec 1.2.23 and before is vulnerable to XML External Entity Expansion when parsing crafted input documents, resulting in possible information disclosure or denial of service
- References
Affected packages
Git / github.com/lsh123/xmlsec
Affected ranges
- Type
- GIT
- Repo
- https://github.com/lsh123/xmlsec
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedLast affected
Affected versions
Other
XMLSEC_0211104
XMLSEC_0_0_X_START
XMLSEC_1_2_X_START
XMLSEC_MIGRATION_TO_GITHUB
XMLSEC_MSCRYPTO_083103_START
start
xmlsec-
xmlsec-0_0_10
xmlsec-0_0_5
xmlsec-0_0_7
xmlsec-0_0_8
xmlsec-0_0_8a
xmlsec-0_0_9
xmlsec-0_1_0
xmlsec-0_1_1
xmlsec-1_0_0
xmlsec-1_0_0pre1
xmlsec-1_0_0rc1
xmlsec-1_0_1
xmlsec-1_0_2
xmlsec-1_0_3
xmlsec-1_0_4
xmlsec-1_1_0
xmlsec-1_1_1
xmlsec-1_1_2
xmlsec-1_2_0
xmlsec-1_2_1
xmlsec-1_2_10
xmlsec-1_2_11
xmlsec-1_2_13
xmlsec-1_2_14
xmlsec-1_2_15
xmlsec-1_2_16
xmlsec-1_2_17
xmlsec-1_2_18
xmlsec-1_2_19
xmlsec-1_2_2
xmlsec-1_2_20
xmlsec-1_2_21
xmlsec-1_2_22
xmlsec-1_2_23
xmlsec-1_2_3
xmlsec-1_2_4
xmlsec-1_2_5
xmlsec-1_2_6
xmlsec-1_2_7
xmlsec-1_2_8
xmlsec-1_2_9