CVE-2021-43090

EUVD-2022-1503
An XML External Entity (XXE) vulnerability exists in soa-model before 1.6.4 in the WSDLParser function.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 64%
Affected Products (NVD)
VendorProductVersion
predic8soa_model
𝑥
< 1.6.4
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://github.com/membrane/soa-model/commit/19de16902468e7963cc4dc6b544574bc1ea3f251
https://github.com/membrane/soa-model/commit/3aa295f155f621d5ea661cb9a0604013fc8fd8ff
https://github.com/membrane/soa-model/issues/281
https://github.com/membrane/soa-model/releases/tag/v1.6.4
https://github.com/membrane/soa-model/commit/19de16902468e7963cc4dc6b544574bc1ea3f251
https://github.com/membrane/soa-model/commit/3aa295f155f621d5ea661cb9a0604013fc8fd8ff
https://github.com/membrane/soa-model/issues/281
https://github.com/membrane/soa-model/releases/tag/v1.6.4