CVE-2017-1000190: XEE
Published Nov 17, 2017
·Updated
SimpleXML (latest version 2.7.1) is vulnerable to an XXE vulnerability resulting SSRF, information disclosure, DoS and so on.
Affected Software
3 affected components
Simplexml Project Simplexml=2.7.1
Apache Solr=8.4.1
Simplexml Project Simplexml<=2.7.1
Event History
Nov 17, 2017
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Data Sourced
via NVD·09:29 PM
DescriptionSeverityWeaknessAffected Software
Data Sourced
via OSV·09:29 PM
DescriptionSeverity
Frequently Asked Questions
1
What is the severity of CVE-2017-1000190?
CVE-2017-1000190 is considered a critical vulnerability due to its potential for SSRF, information disclosure, and denial of service.
2
How do I fix CVE-2017-1000190?
To fix CVE-2017-1000190, upgrade to the latest version of SimpleXML that addresses this vulnerability.
3
What types of attacks can CVE-2017-1000190 facilitate?
CVE-2017-1000190 can facilitate attacks such as Server-Side Request Forgery (SSRF), information disclosure, and denial of service (DoS).
4
Which versions of SimpleXML are affected by CVE-2017-1000190?
CVE-2017-1000190 affects SimpleXML version 2.7.1 and prior versions.
5
How can I determine if my application is at risk from CVE-2017-1000190?
You can determine if your application is at risk from CVE-2017-1000190 by checking if it uses SimpleXML version 2.7.1 or earlier.