Description
XML Injection vulnerability in xmltodict allows Input Data Manipulation. This issue affects xmltodict: from 0.14.2 before 0.15.1. NOTE: the scope of this CVE is disputed by the vendor on the grounds that xmltodict.unparse() delegates element-name handling to Python's xml.sax.saxutils.XMLGenerator, and that XMLGenerator should be the component performing validation.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
xmltodict xmltodict
Default version status: unaffected
0.14.2 to < 0.15.1affected
References
- https://fluidattacks.com/advisories/mono ↗
- https://github.com/martinblech/xmltodict ↗
- https://github.com/martinblech/xmltodict/blob/v0.15.1/CHANGELOG.md ↗
- https://github.com/martinblech/xmltodict/commit/f98c90f071228ed73df997807298e1df4f790c33 ↗
- https://github.com/martinblech/xmltodict/issues/377#issuecomment-3255691923 ↗
- https://docs.python.org/3/library/xml.sax.utils.html#xml.sax.saxutils.escape ↗
- https://docs.python.org/3/library/xml.sax.utils.html#xml.sax.saxutils.XMLGenerator ↗