XML External Entity (XXE) vulnerability in MARC::File::XML module before 1.0.2 for Perl, as used in Evergreen, Koha, perl4lib, and possibly other products, allows context-dependent attackers to read arbitrary files via a crafted XML file.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Marc-xml | Galen_charlton | * | 1.0.1 (including) |
| Marc-xml | Galen_charlton | 1.0 (including) | 1.0 (including) |
| Libmarc-xml-perl | Ubuntu | lucid | * |
| Libmarc-xml-perl | Ubuntu | precise | * |
| Libmarc-xml-perl | Ubuntu | quantal | * |
| Libmarc-xml-perl | Ubuntu | raring | * |
| Libmarc-xml-perl | Ubuntu | saucy | * |
| Libmarc-xml-perl | Ubuntu | upstream | * |