CVE-2012-1102 XML external entity in perl-xml-atom
Attackers can exploit XML external entity injection in the Perl XML::Atom library to read protected resources from the server.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2012-1102?
CVE-2012-1102 is a high-severity vulnerability in perl-xml-atom, published on 9 Jul 2021. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
It was discovered that the XML::Atom Perl module before version 0.39 did not disable external entities when parsing XML from potentially untrusted sources. This may allow attackers to gain read access to otherwise protected resources, depending on how the library is used.
Weakness: CWE-611
Which versions are affected by CVE-2012-1102?
It affects 1 product.
Products include Xml\ \.
How do I fix CVE-2012-1102?
Upgrade to a fixed version.
Is CVE-2012-1102 being exploited?
There is no known exploitation of CVE-2012-1102 in the wild and no public exploit code.
Other vulnerabilities in perl-xml-atom
- CVE-2025-40934 XML-Sig prior to 0.68 for Perl improperly validates XML without signatures
- CVE-2026-9390 XML::Sig versions before 0.71 for Perl allow XPath injection in ID lookup
- CVE-2026-9487 XML::Sig versions before 0.71 for Perl allow signature wrapping via duplicate ID
- CVE-2026-18568 Security feature bypass in XML::Sig
Sources
Also known as DEBIAN-CVE-2012-1102, DSA-2424-1, GHSA-cwv6-3m5x-7f9p.