An XML External Entity (XXE) issue was discovered in Python through 3.9.1. The plistlib module no longer accepts entity declarations in XML plist files to avoid XML vulnerabilities.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python2-debugUpgrade python2-coverageUpgrade python2-dnsUpgrade python2-pluggyUpgrade python2-funcsigsUpgrade python2-scipyUpgrade python2-bsonUpgrade python2-mockUpgrade python2-toolsUpgrade python2-pytest-mockUpgrade python2-PyMySQLUpgrade python2-develUpgrade python2-psycopg2Upgrade python2-CythonUpgrade python2-libsUpgrade python2-noseUpgrade python2-docsUpgrade python2-rpm-macrosUpgrade python2-pipUpgrade python-nose-docsUpgrade python2-psycopg2-testsUpgrade python2-babelUpgrade python2-ipaddressUpgrade python2-wheelUpgrade babelUpgrade python2-pyyamlUpgrade python2-setuptools-wheelUpgrade python2-sqlalchemyUpgrade python2-virtualenvUpgrade python2-docutilsUpgrade python2-pytestUpgrade python2-sixUpgrade python2-chardetUpgrade python2-pytzUpgrade python2-wheel-wheelUpgrade python2-requestsUpgrade python-psycopg2-docUpgrade python2-attrsUpgrade python-sqlalchemy-docUpgrade python2-idnaUpgrade python2-pymongoUpgrade python2-jinja2Upgrade python2-pyUpgrade python2-numpyUpgrade python2-markupsafeUpgrade python2-backports-ssl_match_hostnameUpgrade python2Upgrade python2-lxmlUpgrade python2-testUpgrade python2-pygmentsUpgrade python2-setuptools_scmUpgrade python2-urllib3Upgrade python2-numpy-f2pyUpgrade python2-psycopg2-debugUpgrade python2-tkinterUpgrade python2-docs-infoUpgrade python2-setuptoolsUpgrade python2-pip-wheelUpgrade python2-pymongo-gridfsUpgrade python2-numpy-docUpgrade python2-backportsUpgrade python2-pysocks | May 31, 2024 | Aug 22, 2023 |
| Amazon Linux Ami 2 | — | Upgrade python-testUpgrade python-develUpgrade python-libsUpgrade python3-debugUpgrade python3-tkinterUpgrade python3-testUpgrade python-debuginfoUpgrade python-debugUpgrade python-toolsUpgrade python3-libsUpgrade tkinterUpgrade python3-debuginfoUpgrade python3-toolsUpgrade pythonUpgrade python3Upgrade python3-devel | Oct 27, 2023 | Aug 22, 2023 |
| Amazon_linux | — | Upgrade python27 | Nov 4, 2023 | Aug 22, 2023 |
| Debian | — | Upgrade pypy3Upgrade python3.9Upgrade python2.7 | Sep 22, 2023 | Aug 22, 2023 |
| F5 Big Ip | — | — | May 23, 2024 | Sep 18, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade tkinterUpgrade pythonUpgrade python-libsUpgrade python-devel | Feb 12, 2024 | Aug 22, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3Upgrade python3-develUpgrade python3-testUpgrade python3-libsUpgrade python3-unversioned-command | Mar 13, 2024 | Aug 22, 2023 |
| Oracle_linux | — | Upgrade python2-pytzUpgrade python2-pyyamlUpgrade python-sqlalchemy-docUpgrade python2-CythonUpgrade python2-setuptools_scmUpgrade python2-toolsUpgrade python2-markupsafeUpgrade python2-scipyUpgrade python2-pip-wheelUpgrade python2-virtualenvUpgrade python2-idnaUpgrade python2-docutilsUpgrade python2-libsUpgrade python2-sqlalchemyUpgrade babelUpgrade python2-numpyUpgrade python2-lxmlUpgrade python2-setuptoolsUpgrade python2-pytest-mockUpgrade python2-ipaddressUpgrade python2-pymongoUpgrade python2-PyMySQLUpgrade python2-tkinterUpgrade python2-backportsUpgrade python2-babelUpgrade python2-docs-infoUpgrade python2-noseUpgrade python2-develUpgrade python2-pluggyUpgrade python2-requestsUpgrade python2-pyUpgrade python2-jinja2Upgrade python2-chardetUpgrade python2-funcsigsUpgrade python2-numpy-docUpgrade python2-pygmentsUpgrade python2-pipUpgrade python2-pymongo-gridfsUpgrade python2-wheelUpgrade python2-pysocksUpgrade python2-numpy-f2pyUpgrade python2-mockUpgrade python2-dnsUpgrade python2-rpm-macrosUpgrade python2-sixUpgrade python2-debugUpgrade python-nose-docsUpgrade python2-pytestUpgrade python2-urllib3Upgrade python2-psycopg2-debugUpgrade python2-backports-ssl_match_hostnameUpgrade python2-psycopg2-testsUpgrade python2-wheel-wheelUpgrade python2-docsUpgrade python2-attrsUpgrade python-psycopg2-docUpgrade python2-setuptools-wheelUpgrade python2Upgrade python2-testUpgrade python2-coverageUpgrade python2-psycopg2Upgrade python2-bson | May 28, 2024 | Aug 22, 2023 |
| Redhat_linux | — | Upgrade python2-psycopg2-debuginfoUpgrade python-pymongo-debugsourceUpgrade python2-mockUpgrade python2-attrsUpgrade python2-pymongoUpgrade python2-requestsUpgrade python2-sixUpgrade python2-pipNo solution existsUpgrade scipy-debugsourceUpgrade python2-jinja2Upgrade python2-backports-ssl_match_hostnameUpgrade python2-testUpgrade python2-wheelUpgrade python-psycopg2-docUpgrade numpy-debugsourceUpgrade python-sqlalchemy-docUpgrade python2Upgrade python2-chardetUpgrade python2-rpm-macrosUpgrade python2-pluggyUpgrade python2-tkinterUpgrade python2-setuptools_scmUpgrade python2-urllib3Upgrade python2-coverage-debuginfoUpgrade python2-pygmentsUpgrade python-psycopg2-debugsourceUpgrade python2-setuptoolsUpgrade python2-pytzUpgrade python2-pysocksUpgrade python2-numpy-f2pyUpgrade python2-wheel-wheelUpgrade python2-pymongo-gridfsUpgrade python2-idnaUpgrade python2-backportsUpgrade python2-markupsafeUpgrade python2-lxml-debuginfoUpgrade python2-psycopg2-debugUpgrade python2-lxmlUpgrade python2-babelUpgrade python2-debuginfoUpgrade python2-numpy-docUpgrade python2-numpy-debuginfoUpgrade python2-numpyUpgrade python-nose-docsUpgrade python-psycopg2-debuginfoUpgrade python2-scipyUpgrade python2-docutilsUpgrade python-coverage-debugsourceUpgrade python2-Cython-debuginfoUpgrade python2-libsUpgrade python2-pymongo-debuginfoUpgrade python2-toolsUpgrade python2-virtualenvUpgrade python2-develUpgrade python2-pytestUpgrade python2-ipaddressUpgrade python2-pytest-mockUpgrade python2-scipy-debuginfoUpgrade python-lxml-debugsourceUpgrade Cython-debugsourceUpgrade python2-coverageUpgrade python2-psycopg2-debug-debuginfoUpgrade python2-dnsUpgrade python2-psycopg2Upgrade python2-pyyamlUpgrade python2-noseUpgrade python2-debugsourceUpgrade python2-bson-debuginfoUpgrade python2-pyyaml-debuginfoUpgrade python2-docsUpgrade python2-CythonUpgrade python2-bsonUpgrade python2-funcsigsUpgrade PyYAML-debugsourceUpgrade python2-docs-infoUpgrade python2-setuptools-wheelUpgrade python-pymongo-debuginfoUpgrade babelUpgrade python2-pyUpgrade python2-pip-wheelUpgrade python2-debugUpgrade python2-sqlalchemyUpgrade python2-PyMySQLUpgrade python2-psycopg2-tests | May 23, 2024 | Aug 22, 2023 |
| Rocky_linux | — | Upgrade python2-lxmlUpgrade Cython-debugsourceUpgrade python-coverage-debugsourceUpgrade python2-numpy-debuginfoUpgrade python-psycopg2-debugsourceUpgrade python2-psycopg2Upgrade python2-sqlalchemyUpgrade python-pymongo-debuginfoUpgrade python2-scipyUpgrade python2-psycopg2-debug-debuginfoUpgrade python2-pymongo-gridfsUpgrade python2-debugUpgrade python2-debugsourceUpgrade python2Upgrade python2-coverageUpgrade python2-develUpgrade python2-debuginfoUpgrade python2-markupsafeUpgrade python2-testUpgrade python2-libsUpgrade scipy-debugsourceUpgrade python2-CythonUpgrade python2-bsonUpgrade python2-psycopg2-debugUpgrade python2-bson-debuginfoUpgrade python2-psycopg2-testsUpgrade python2-pymongo-debuginfoUpgrade python2-tkinterUpgrade python2-toolsUpgrade python-psycopg2-docUpgrade python-lxml-debugsourceUpgrade python2-numpyUpgrade python2-psycopg2-debuginfoUpgrade python-psycopg2-debuginfoUpgrade numpy-debugsourceUpgrade python2-pyyaml-debuginfoUpgrade python2-coverage-debuginfoUpgrade python2-pyyamlUpgrade python2-numpy-f2pyUpgrade python2-lxml-debuginfoUpgrade python2-backportsUpgrade python2-scipy-debuginfoUpgrade python2-Cython-debuginfoUpgrade python-pymongo-debugsourceUpgrade python2-pymongoUpgrade PyYAML-debugsource | May 8, 2025 | Aug 22, 2023 |
| Suse | — | Upgrade python-cursesUpgrade python-develUpgrade python-xmlUpgrade python-base-32bitUpgrade libpython2_7-1_0-32bitUpgrade python-demoUpgrade python-docUpgrade python-gdbmUpgrade python-doc-pdfUpgrade python-idleUpgrade python-baseUpgrade pythonUpgrade libpython2_7-1_0Upgrade python-tkUpgrade python-32bit | Oct 10, 2023 | Aug 22, 2023 |
| Ubuntu | — | Upgrade libpython2.7 (Ubuntu Pro)Upgrade python2.7Upgrade python2.7 (Ubuntu Pro)Upgrade python3.7 (Ubuntu Pro)Upgrade python2.7-minimal (Ubuntu Pro)Upgrade python3.5 (Ubuntu Pro)Upgrade libpython3.5-stdlib (Ubuntu Pro)Upgrade python3.6-minimal (Ubuntu Pro)Upgrade python3.6 (Ubuntu Pro)Upgrade python3.7-minimal (Ubuntu Pro)Upgrade libpython2.7-stdlib (Ubuntu Pro)Upgrade libpython3.5 (Ubuntu Pro)Upgrade python3.5-minimal (Ubuntu Pro)Upgrade python3.8 (Ubuntu Pro)Upgrade python3.8-minimal (Ubuntu Pro) | Sep 18, 2023 | Aug 22, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 22, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub