CVE-2021-44557
Critical
Description
National Library of the Netherlands multiNER <= c0440948057afc6e3d6b4903a7c05e666b94a3bc is affected by an XML External Entity (XXE) vulnerability in multiNER/ner.py. Since XML parsing resolves external entities, a malicious XML stream could leak internal files and/or cause a DoS.
SeverityCritical
CVSS9.1
Exploit probability—
ProductKb Multiner
PublishedDec 8, 2021
First seenDec 8, 2021
How to fix
Update
- kb multiner08-25-2021 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| kb multiner | v < 08-25-2021 | 08-25-2021 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.