XML external entity (XXE) vulnerability in PyAMF before 0.8.0 allows remote attackers to cause a denial of service or read arbitrary files via a crafted Action Message Format (AMF) payload.
CVSS 3.1HIGH 7.1·Local·No auth·User interaction·EPSS 0.0177·Published 2020-01-15·Fixed in 0.8.0CWE-611