unstructured XML External Entity (XXE)
Date: 2024-12
Affected: pip/unstructured
Attack vector: other
Category: vulnerability-disclosure
Severity: Medium
CVE: CVE-2024-46455
CWE: CWE-611

unstructured v.0.14.2 and before is vulnerable to XML External Entity (XXE) via the XMLParser.


Mitigations:

Architectural layers (MAESTRO):