An XML External Entity (XXE) vulnerability in the ebookmeta.get_metadata function of lxml before v4.9.1 allows attackers to access sensitive information or cause a Denial of Service (DoS) via crafted XML input.

According to the versions of the python-lxml package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

    An XML External Entity (XXE) vulnerability in the ebookmeta.get_metadata function of lxml before v4.9.1     allows attackers to access sensitive information or cause a Denial of Service (DoS) via crafted XML     input.(CVE-2024-37388)

Tenable has extracted the preceding description block directly from the EulerOS Virtualization python-lxml security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the python-lxml package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    An XML External Entity (XXE) vulnerability in the ebookmeta.get_metadata function of lxml before v4.9.1     allows attackers to access sensitive information or cause a Denial of Service (DoS) via crafted XML     input.(CVE-2024-37388)

Tenable has extracted the preceding description block directly from the EulerOS python-lxml security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
209795	EulerOS Virtualization 2.12.0 : python-lxml (EulerOS-SA-2024-2777)	Nessus	Huawei Local Security Checks	critical
209787	EulerOS Virtualization 2.12.1 : python-lxml (EulerOS-SA-2024-2759)	Nessus	Huawei Local Security Checks	critical
208399	EulerOS 2.0 SP11 : python-lxml (EulerOS-SA-2024-2591)	Nessus	Huawei Local Security Checks	critical
208396	EulerOS 2.0 SP11 : python-lxml (EulerOS-SA-2024-2565)	Nessus	Huawei Local Security Checks	critical
208353	EulerOS 2.0 SP12 : python-lxml (EulerOS-SA-2024-2514)	Nessus	Huawei Local Security Checks	critical
208347	EulerOS 2.0 SP12 : python-lxml (EulerOS-SA-2024-2539)	Nessus	Huawei Local Security Checks	critical
207183	EulerOS 2.0 SP10 : python-lxml (EulerOS-SA-2024-2427)	Nessus	Huawei Local Security Checks	critical
207177	EulerOS 2.0 SP9 : python-lxml (EulerOS-SA-2024-2377)	Nessus	Huawei Local Security Checks	critical
207165	EulerOS 2.0 SP10 : python-lxml (EulerOS-SA-2024-2450)	Nessus	Huawei Local Security Checks	critical
207122	EulerOS 2.0 SP9 : python-lxml (EulerOS-SA-2024-2402)	Nessus	Huawei Local Security Checks	critical

Detections

Analytics

CVE-2024-37388

high

Tenable Plugins

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical