What’s Vulnerable › Vulnerabilities

CVE-2012-1102

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2021-07-09 · updated 2026-06-16
• Weakness: CWE-611

Description

It was discovered that the XML::Atom Perl module before version 0.39 did not disable external entities when parsing XML from potentially untrusted sources. This may allow attackers to gain read access to otherwise protected resources, depending on how the library is used.

Affected products

• Xml::Atom Project Xml::Atom: before 0.39 — fixed in 0.39

How to fix

Upgrade to a fixed version: Xml::Atom Project Xml::Atom 0.39. Check the vendor advisory for mitigations.

References

• https://metacpan.org/release/MIYAGAWA/XML-Atom-0.39/source/Changes
• https://seclists.org/oss-sec/2012/q1/549
• https://metacpan.org/release/MIYAGAWA/XML-Atom-0.39/source/Changes
• https://seclists.org/oss-sec/2012/q1/549

Get alerted when CVE-2012-1102 or the next vulnerability affects your stack