|
|
| |
|
| |
php-pear-Auth-OpenID: denial of service
| Package(s): | php-pear-Auth-OpenID |
CVE #(s): | CVE-2013-4701
|
| Created: | September 3, 2013 |
Updated: | September 16, 2013 |
| Description: |
From the CVE entry:
Auth/Yadis/XML.php in PHP OpenID Library 2.2.2 and earlier allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service (CPU and memory consumption) via XRDS data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. |
| Alerts: |
|
( Log in to post comments)
|
|
|