Beveiligingsadvies

CVE-2012-6531

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2013-02-13 17:00:00

Laatst bijgewerkt 2024-09-16 19:56:53

Toegewezen door mitre

CVSS-score geen score

Status PUBLISHED

Beschrijving

(1) Zend_Dom, (2) Zend_Feed, and (3) Zend_Soap in Zend Framework 1.x before 1.11.13 and 1.12.x before 1.12.0 do not properly handle SimpleXMLElement classes, which allow remote attackers to read arbitrary files or create TCP connections via an external entity reference in a DOCTYPE element in an XML-RPC request, aka an XML external entity (XXE) injection attack, a different vulnerability than CVE-2012-3363.

← Alle CVE's bekijken Bekijk op cve.org ↗