cve/2023/CVE-2023-52426.md

CVE-2023-52426

Description

libexpat through 2.5.0 allows recursive XML Entity Expansion if XML_DTD is undefined at compile time.

POC

Reference

No PoCs from references.

Github

• https://github.com/GrigGM/05-virt-04-docker-hw
• https://github.com/Murken-0/docker-vulnerabilities
• https://github.com/PaulZtx/docker_practice
• https://github.com/TimoTielens/httpd-security
• https://github.com/egorvozhzhov/docker-test
• https://github.com/fkie-cad/nvd-json-data-feeds
• https://github.com/fokypoky/places-list
• https://github.com/testing-felickz/docker-scout-demo