Christian Stefanescu vulnerabilities
We track 2 vulnerabilities in Christian Stefanescu products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on July 26, 2022.
2vulnerabilities
0critical
2high
0exploited
7.5average CVSS score
Latest Christian Stefanescu vulnerabilities
- 7.5 High severity
untangle: Improper Restriction of Recursive Entity References in DTDs
untangle is a python library to convert XML data to python objects. untangle versions 1.2.0 and earlier improperly restricts recursive entity references in DTDs. By exploiting this vulnerability, a remote unauthenticated attacker may cause a denial-of-service
- 7.5 High severity
untangle: Improper Restriction of XML External Entity Reference
untangle is a python library to convert XML data to python objects. untangle versions 1.2.0 and earlier improperly restricts XML external entity references. By exploiting this vulnerability, a remote unauthenticated attacker may read the contents of local file