PyPI/swift CVE-2022-47950: medium 6.5, EPSS 1.01%
OpenStack Swift XML external entities (XXE) Injection
Action: Upgrade swift to 2.28.1 or later.
pip install swift==2.28.1pip install swift==2.29.2pip install swift==2.30.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.28.1 | - |
| 2.29.0 | 2.29.2 | - |
| 2.30.0 | 2.30.1 | - |
Fixed versions
| 2.28.1 | 2.29.2 | 2.30.1 |
Sources
- osv: GHSA-274c-rx2j-2v3x
- https://nvd.nist.gov/vuln/detail/CVE-2022-47950
- https://github.com/openstack/swift/commit/12e54391861e7d182d58f89fb88b027e65842640
- https://github.com/openstack/swift/commit/7d13d1a82e1f5d01205a13184907501b4fcbe2b0
- https://github.com/openstack/swift/commit/8dd96470a859dc7b189404fb67bd3899ae9c617f
- https://github.com/openstack/swift/commit/b8467e190f6fc67fd8fb6a8c5e32b2aa6a10fd8e
- https://github.com/openstack/swift/commit/baa98848451b5c234443a068691e12841a5a8383
- https://github.com/openstack/swift/commit/c834e7a53d5a33a3fd13ffd954e6f4f4ee953dfc
- https://github.com/openstack/swift/commit/d8d04ef43c90079d436b2e49617b4425ba39c28e
- https://github.com/openstack/swift/commit/f10672514217adadfc776d9ea2ffb20a37ce073b
- https://github.com/openstack/swift
- https://launchpad.net/bugs/1998625
- https://lists.debian.org/debian-lts-announce/2023/01/msg00021.html
- https://security.openstack.org/ossa/OSSA-2023-001.html
- https://www.debian.org/security/2023/dsa-5327
CVE-2022-47950 · published · modified · JSON