Threats tagged 'ghsa-hxw6-573p-p5f4'

This vulnerability involves XML parsers that process attacker-controlled update manifests or network responses with external entity resolution enabled, which can lead to XML External Entity (XXE) attacks. XXE vulnerabilities allow attackers to interfere with the processing of XML data, potentially leading to information disclosure or denial of service. The vulnerability is rated critical with a CVSS score of 9.2. No specific affected software versions or patches are provided in the available data.