CVE-2019-19032

HIGH 8.1CVE-2019-19032 · Published 30/12/2019 · updated 17/06/2026

In short

CVE-2019-19032 is a HIGH (CVSS 8.1) vulnerability affecting xmlblueprint (xmlblueprint).
Chance of exploitation in the next 30 days (EPSS): 4.5%, higher than 91.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
xmlblueprint xmlblueprint	`≤ 16.191112`	No fix yet

Description

XMLBlueprint through 16.191112 is affected by XML External Entity Injection. The impact is: Arbitrary File Read when an XML File is validated. The component is: XML Validate function. The attack vector is: Specially crafted XML payload.

References

packetstormsecurity.com/files/156139/XMLBlueprint-16.191112-XML-Injection.html · Exploit
hackpuntes.com/cve-2019-19032-xmlblueprint-16-191112-inyeccion-xml · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free