CVE-2023-0842Disclosure(xml2js_project / xml2js)

LOWCVSS 5.3 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

xml2js version 0.4.23 allows an external attacker to edit or add new properties to an object. This is possible because the application does not properly validate incoming JSON keys, thus allowing the __proto__ property to be edited.

xml2js_project CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Exploit / PoC references

Other references

Weakness type (CWE)

CWE-1321

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

xml2js

Threat summary

1 mentions across 1 observed day

What's happening

Technical details provided in 1 signal
Disclosure: 1 classified signal
1 total mentions across 1 day

Affected systems

Vendors

xml2js_project

Products

xml2js

1 version affected across 1 product

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

Disclosure

1100.0%

Full discourse1 post

TracePilot AI@TracePilotAI136d
Disclosure
The 8 vulnerabilities? They're in aws's dependency on xml2js v0.4.x, which has an XXE vulnerability (CVE-2023-0842). Attackers can send malicious XML through your S3 operations and read arbitrary files from your server. https://t.co/QAtKqvQhI5
Post summary
The tweet announces an XXE flaw in AWS’s xml2js dependency (CVE-2023-0842) that permits file reading through malicious XML in S3. No PoC, exploit, patch, or active exploitation details are provided.
1000020
5 followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	xml2js_project	xml2js	0.4.23	-	-

Explore more

Back to dashboard xml2js_project CVEs xml2js vulnerabilities