← Database

CVE-2022-48565

CRITICAL CVSS: 9.8 Published: 2023-08-22 Modified: 2026-06-17

Description

An XML External Entity (XXE) issue was discovered in Python through 3.9.1. The plistlib module no longer accepts entity declarations in XML plist files to avoid XML vulnerabilities.

Affected Platforms

Debian Debian LinuxPython Python

Weakness Type

CWE-611

References