XML::LibXML Vulnerability: XXE Attacks via _clone Function

CVE-2015-3451 · MEDIUM Severity

AV:N/AC:L/AU:N/C:P/I:N/A:N

The _clone function in XML::LibXML before 2.0119 does not properly set the expand_entities option, which allows remote attackers to conduct XML external entity (XXE) attacks via crafted XML data to the (1) new or (2) load_xml function.

Learn more about our External Network Penetration Testing.