VYPR
← All advisories
High severity7.1NVD Advisory· Published Jul 17, 2017· Updated Jun 17, 2026

CVE-2017-1000061

CVE-2017-1000061

Description

xmlsec 1.2.23 and before is vulnerable to XML External Entity Expansion when parsing crafted input documents, resulting in possible information disclosure or denial of service

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Xmlsec/xmlsec2 versions
    cpe:2.3:a:xmlsec_project:xmlsec:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:xmlsec_project:xmlsec:*:*:*:*:*:*:*:*range: <=1.2.23
    • (no CPE)range: <=1.2.23

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.