Cyber Resilience

CVE-2024-3572

HighPublic PoC

Published: 16 April 2024

Published
16 April 2024
Modified
28 July 2025
KEV Added
—
Patch
—
CVSS Score v3 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score 0.0016 36.8th percentile
Risk Priority 15 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2024-3572 is a high-severity Data Amplification (CWE-409) vulnerability in Scrapy Scrapy. Its CVSS base score is 7.5 (High).

Operationally, exploitation aligns with the MITRE ATT&CK technique Data from Local System (T1005); ranked at the 36.8th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.

This vulnerability is AI-related — categorised as Data Processing Libraries; in the Privacy and Disclosure risk domain; MITRE ATLAS techniques in scope: External Harms (AML.T0048), Exfiltration via AI Inference API (AML.T0024), AI Model Inference API Access (AML.T0040).

EU & UK References

Vulnerability details

The scrapy/scrapy project is vulnerable to XML External Entity (XXE) attacks due to the use of lxml.etree.fromstring for parsing untrusted XML data without proper validation. This vulnerability allows attackers to perform denial of service attacks, access local files, generate network…

more

connections, or circumvent firewalls by submitting specially crafted XML data.

CWE(s)
CWE-409

AI Security AnalysisAI

AI Category
Data Processing Libraries
Risk Domain
Privacy and Disclosure
OWASP Top 10 for LLMs 2025
None mapped
Classification Reason
Scrapy is a web scraping framework used for data extraction in AI/ML pipelines, particularly for collecting training data; vulnerability reported on AI/ML-focused bug bounty platform (huntr.com).

Related Threats

MITRE ATT&CK Enterprise TechniquesAI

T1005 Data from Local System Collection
Adversaries may search local system sources, such as file systems, configuration files, local databases, virtual machine files, or process memory, to find files of interest and sensitive data prior to Exfiltration.
attack.mitre.org →
T1046 Network Service Discovery Discovery
Adversaries may attempt to get a listing of services running on remote hosts and local network infrastructure devices, including those that may be vulnerable to remote software exploitation.
attack.mitre.org →
T1090.001 Internal Proxy Command And Control
Adversaries may use an internal proxy to direct command and control traffic between two or more systems in a compromised environment.
attack.mitre.org →
T1190 Exploit Public-Facing Application Initial Access
Adversaries may attempt to exploit a weakness in an Internet-facing host or system to initially access a network.
attack.mitre.org →
T1499.004 Application or System Exploitation Impact
Adversaries may exploit software vulnerabilities that can cause an application or system to crash and deny availability to users.
attack.mitre.org →
Why these techniques?

XXE vulnerability enables remote exploitation of XML parsing (T1190), local file disclosure (T1005), SSRF for network service discovery (T1046) and internal proxying to bypass firewalls (T1090.001), and DoS via XML bomb/resource exhaustion (T1499.004).

MITRE ATLAS TechniquesAI

MITRE ATLAS techniques

AML.T0048: External HarmsAML.T0024: Exfiltration via AI Inference APIAML.T0040: AI Model Inference API Access

Affected Assets

scrapy
scrapy
≤ 2.11.1

Mitigating Controls

Likely Mitigating Controls AI

Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.

SC-5 Denial-of-service Protection
addresses: CWE-409

Limits effects of data amplification from compressed or malicious inputs.

References