7.8high
CVE-2016-9487
EpubCheck 4.0.1 is vulnerable to external XML entity processing attacks
Published 8 y ago · modified 4 mo ago · JSON
CVSS
7.8
v3.1 · NVD
CISA KEV
No
not known exploited
EPSS
1.3%
percentile 70%
Public exploits
0
none known
Summary
EpubCheck 4.0.1 does not properly restrict resolving external entities when parsing XML in EPUB files during validation. An attacker who supplies a specially crafted EPUB file may be able to exploit this behavior to read arbitrary files, or have the victim execute arbitrary requests on his behalf, abusing the victim's trust relationship with other entities.
Exploit prediction (EPSS)
1.26% probability of exploitation in the next 30 days, higher than 70% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 3.1 | 7.8 | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
| NVD | 2.0 | 6.8 | AV:N/AC:M/Au:N/C:P/I:P/A:P |
Affected products
- EpubCheck EpubCheck
Classification
- Weakness
- CWE-611 Improper Restriction of XML External Entity Reference
References
- kb.cert.org /vuls/id/779243 · third-party-advisory, x_refsource_CERT-VN, x_transferred
- securityfocus.com /bid/94864/ · vdb-entry, x_refsource_BID, x_transferred
Sources
- CVE List: CVE-2016-9487
- NVD: CVE-2016-9487
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.