| Package | Affected versions | Patched versions |
|---|---|---|
| marc-xml | = 1.0≤ 1.0.1 |
XML External Entity (XXE) vulnerability in MARC::File::XML module before 1.0.2 for Perl, as used in Evergreen, Koha, perl4lib, and possibly other products, allows context-dependent attackers to read arbitrary files via a crafted XML file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free