Search vulnerabilities

Results 1

Export CSV
CVE-2020-26708

requests-xml v0.2.3 was discovered to contain an XML External Entity Injection (XXE) vulnerability which allows attackers to execute arbitrary code via a crafted XML file.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Products