PyPI/pyamf CVE-2015-8549: high 7.1, EPSS 1.77%

PyAMF vulnerable to XML external entity (XXE)

Action: Upgrade pyamf to 0.8.0 or later.

pip install pyamf==0.8.0

Affected

Fixed versions

Sources

• osv: GHSA-m7m4-4vm8-55wg
• https://nvd.nist.gov/vuln/detail/CVE-2015-8549
• https://github.com/hydralabs/pyamf/pull/58
• https://github.com/advisories/GHSA-m7m4-4vm8-55wg
• https://github.com/hydralabs/pyamf
• https://github.com/hydralabs/pyamf/releases/tag/v0.8.0
• https://github.com/pypa/advisory-database/tree/main/vulns/pyamf/PYSEC-2020-339.yaml
• https://pypi.org/project/pyamf
• http://www.ocert.org/advisories/ocert-2015-011.html

CVE-2015-8549 · published 2022-05-24T17:06:13Z · modified 2024-10-21T20:26:37.499132Z · JSON