GHSA-52wr-3vww-rmpq

Suggest an improvement
Source
https://github.com/advisories/GHSA-52wr-3vww-rmpq
Import Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-52wr-3vww-rmpq/GHSA-52wr-3vww-rmpq.json
JSON Data
https://api.osv.dev/v1/vulns/GHSA-52wr-3vww-rmpq
Aliases
Published
2022-05-17T04:44:24Z
Modified
2026-07-07T11:56:39Z
Summary
SOAPpy vulnerable to XML External Entity attacks
Details

SOAPpy 0.12.5 allows remote attackers to read arbitrary files via a SOAP request containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

Database specific 
{
    "cwe_ids":  [
        "CWE-611"
    ],
    "github_reviewed":  true,
    "github_reviewed_at":  "2023-08-16T23:29:45Z",
    "nvd_published_at":  "2014-05-12T14:55:00Z",
    "severity":  "MODERATE"
}
References

Affected packages

PyPI / soappy

Package

Name
soappy
View open source insights on deps.dev
Purl
pkg:pypi/soappy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Last Affected
0.12.5

Affected versions

0.*
0.12.1
0.12.3
0.12.4
0.12.5

Database specific

source 
"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-52wr-3vww-rmpq/GHSA-52wr-3vww-rmpq.json"