Critical severityNVD Advisory· Published Jul 18, 2019· Updated Aug 5, 2024
CVE-2019-1010268
CVE-2019-1010268
Description
Ladon since 0.6.1 (since ebef0aae48af78c159b6fce81bc6f5e7e0ddb059) is affected by: XML External Entity (XXE). The impact is: Information Disclosure, reading files and reaching internal network endpoints. The component is: SOAP request handlers. For instance: https://bitbucket.org/jakobsg/ladon/src/42944fc012a3a48214791c120ee5619434505067/src/ladon/interfaces/soap.py#lines-688. The attack vector is: Send a specially crafted SOAP call.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
ladonPyPI | >= 0.6.1, <= 1.0.7 | — |
Affected products
2Patches
Vulnerability mechanics
References
4- github.com/advisories/GHSA-vg35-vc9f-q7x2ghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2019-1010268ghsaADVISORY
- github.com/pypa/advisory-database/tree/main/vulns/ladon/PYSEC-2019-184.yamlghsaWEB
- www.exploit-db.com/exploits/43113ghsax_refsource_MISCWEB
News mentions
0No linked articles in our index yet.