CVE-2024-28757
expat: XML Entity Expansion
libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of external parsers (created via XML_ExternalEntityParserCreate).
CVSS 3.1 · 7.5 High
EPSS 2.0%
KEV · Not listed
Vendors
Products