CVE-2024-28757

Published: Mar 10, 2024

Modified: Nov 4, 2025

PUBLISHED

Description

libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of external parsers (created via XML_ExternalEntityParserCreate).

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

https://github.com/libexpat/libexpat/pull/842

https://github.com/libexpat/libexpat/issues/839

FEDORA-2024-4e6e660fae

vendor-advisory

FEDORA-2024-40b98c9ced

vendor-advisory

https://security.netapp.com/advisory/ntap-20240322-0001/

FEDORA-2024-afb73e6f62

vendor-advisory

[oss-security] 20240315 Expat 2.6.2 released, includes security fixes

mailing-list

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2024-28757

Description

Affected Products

References