CVE-2015-8549

Description

XML external entity (XXE) vulnerability in PyAMF before 0.8.0 allows remote attackers to cause a denial of service or read arbitrary files via a crafted Action Message Format (AMF) payload.

References

https://github.com/hydralabs/pyamf/releases/tag/v0.8.0

https://github.com/hydralabs/pyamf/pull/58

http://www.ocert.org/advisories/ocert-2015-011.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3