1. Home
  2. CVE Database
  3. CVE-2012-1102
HIGH · 7.5

CVE-2012-1102

It was discovered that the XML::Atom Perl module before version 0.39 did not disable external entities when parsing XML from potentially untrusted sources. This may allow attackers to gain read access...

Vulnerability Description

It was discovered that the XML::Atom Perl module before version 0.39 did not disable external entities when parsing XML from potentially untrusted sources. This may allow attackers to gain read access to otherwise protected resources, depending on how the library is used.

CVSS Score

7.5

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
Xml\\< 0.39, atom_project

Related Weaknesses (CWE)

CWE-611

References

FAQ

What is CVE-2012-1102?

CVE-2012-1102 is a vulnerability with a CVSS score of 7.5 (HIGH). It was discovered that the XML::Atom Perl module before version 0.39 did not disable external entities when parsing XML from potentially untrusted sources. This may allow attackers to gain read access...

How severe is CVE-2012-1102?

CVE-2012-1102 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2012-1102?

Check the references section above for vendor advisories and patch information. Affected products include: Xml\ \.