Libtaxii Project

libtaxii_project

1 CVE • 1 product

Products (1)

Click to collapse

Toggle

Libtaxii

libtaxii

1 CVE

CVEs (1)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2020-27197 2Eclecticiq Libtaxii Project 2Libtaxii Opentaxii Jun 17, 2026 Oct 17, 2020 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 TAXII libtaxii through 1.1.117, as used in EclecticIQ OpenTAXII through 0.2.0 and other products, allows SSRF via an initial http:// substring to the parse method, even when the no_network setting is used for the XML par...Show more TAXII libtaxii through 1.1.117, as used in EclecticIQ OpenTAXII through 0.2.0 and other products, allows SSRF via an initial http:// substring to the parse method, even when the no_network setting is used for the XML parser. NOTE: the vendor points out that the parse method "wraps the lxml library" and that this may be an issue to "raise ... to the lxml group.Show less

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2020-27197

2Eclecticiq

Libtaxii Project

2Libtaxii

Opentaxii

Jun 17, 2026

Oct 17, 2020

N/A· v4

9.8 CRITICAL· v3

7.5 HIGH· v2

TAXII libtaxii through 1.1.117, as used in EclecticIQ OpenTAXII through 0.2.0 and other products, allows SSRF via an initial http:// substring to the parse method, even when the no_network setting is used for the XML parser. NOTE: the vendor points out that the parse method "wraps the lxml library" and that this may be an issue to "raise ... to the lxml group.Show less