zwczou/weixin-python

zwczou/weixin-python

GitHubGitHub
GitHubgithub.com
weixin-python.rtfd.ioweixin-python.rtfd.io
Releases2
Frequency2 years 1 month
Last Release
Stars1.68K
微信SDK - 包括微信支付,微信公众号,微信登陆,微信消息处理等
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2018-25082↗
6.3 MEDIUM6.5 MEDIUM

A vulnerability was found in zwczou WeChat SDK Python 0.3.0 and classified as critical. This issue affects the function validate/to_xml. The manipulation leads to xml external entity reference. The attack may be initiated remotely. Upgrading to version 0.5.5 is able to address this issue. The patch is named e54abadc777715b6dcb545c13214d1dea63df6c9. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-223403.