CVE-2012-1102

It was discovered that the XML::Atom Perl module before version 0.39 did not disable external entities when parsing XML from potentially untrusted sources. This may allow attackers to gain read access to otherwise protected resources, depending on how the library is used.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
redhatCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 52%
VendorProductVersion
xml\\
𝑥
< 0.39
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
libxml-atom-perl
bullseye
0.42-2.1
fixed
sid
0.43-1
fixed
trixie
0.43-1
fixed
bookworm
0.43-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
libxml-atom-perl
oneiric
not-affected
natty
Fixed 0.37-1+squeeze1build0.11.04.1
released
maverick
Fixed 0.37-1+squeeze1build0.10.10.1
released
lucid
Fixed 0.37-1+squeeze1build0.10.04.1
released
hardy
ignored