CRITICAL 9.8 Microsoft PoC
CVE-2022-48565
An XML External Entity (XXE) issue was discovered in Python through 3.9.1. The plistlib module no longer accepts entity declarations in XML plist files to avoid XML vulnerabilities.
Microsoft Security Update 2023-Aug: An XML External Entity (XXE) issue was discovered in Python through 3.9.1. The plistlib module no longer accepts entity declarations in XML plist files to avoid XML vulnerabilities.
Affected Products
- azl3 python-py 1.11.0-1 on Azure Linux 3.0
References
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-48565
- https://nvd.nist.gov/vuln/detail/CVE-2022-48565
This critical severity vulnerability with a CVSS score of 9.8 was published on 2023-08-08 via Microsoft. 🚨 A public proof-of-concept exploit is available on GitHub. EPSS score: 5.1% (top 8% of all CVEs by exploitation probability). Affected: azl3 python-py 1.11.0-1 on Azure Linux 3.0.
Risk Timeline
CVE Disclosed2023-08-08 · 1179 days ago
Public PoC Exploit AvailableWeaponised proof-of-concept code is publicly accessible
Remediation Resources
Official Advisory
msrc.microsoft.com/update-guide/vulnerability/CVE-2022-48565NVD / MITRE
nvd.nist.gov/vuln/detail/CVE-2022-48565Related Vulnerabilities
| CVE | Title | Severity | CVSS |
|---|---|---|---|
| CVE-2026-110264 | Integer Overflow or Wraparound in GitLab | CRITICAL | 10.0 |
| CVE-2026-94603 | Podman: The `podman run` command can be instructed to disable almost all sandbox | CRITICAL | 10.0 |
| CVE-2022-36648 | The hardware emulation in the of_dpa_cmd_add_l2_flood of rocker device model in | CRITICAL | 10.0 |
| CVE-2026-77524 | KEDA: Privilege escalation from namespace admin to cluster admin via KEDA Trigge | CRITICAL | 9.9 |
| CVE-2026-115384 | Wasmtime 39.0.0 before 48.0.4 and 49.0.0 before 49.0.2 Stack Buffer Overflow | CRITICAL | 9.9 |
| CVE-2026-44210 | Kata Containers have VM Escape via virtiofsd Argument Injection through Default- | CRITICAL | 9.9 |
vulnfeed aggregates 17475 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.