XML External Entity (XXE) Vulnerability in PyAMF Allows Remote File Read and Denial of Service

CVE-2015-8549 · HIGH Severity

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

XML external entity (XXE) vulnerability in PyAMF before 0.8.0 allows remote attackers to cause a denial of service or read arbitrary files via a crafted Action Message Format (AMF) payload.

Learn more about our External Network Penetration Testing.