PHP OpenID Library Denial of Service vulnerability

🗓️ 17 May 2022 03:46:28Reported by GitHub Advisory DatabaseType

PHP OpenID Library Denial of Service vulnerability, XML External Entity (XXE) issu

Reporter	Title	Published	Views	Family All 30
CVE	CVE-2013-4701	21 Aug 201316:00	–	cve
Cvelist	CVE-2013-4701	21 Aug 201316:00	–	cvelist
EUVD	EUVD-2022-2640	3 Oct 202520:07	–	euvd
Fedora	[SECURITY] Fedora 18 Update: php-pear-Auth-OpenID-2.2.2-7.fc18	1 Sep 201323:09	–	fedora
Fedora	[SECURITY] Fedora 19 Update: php-pear-Auth-OpenID-2.2.2-7.fc19	1 Sep 201323:09	–	fedora
Tenable Nessus	Fedora 18 : php-pear-Auth-OpenID-2.2.2-7.fc18 (2013-15253)	2 Sep 201300:00	–	nessus
Tenable Nessus	Fedora 19 : php-pear-Auth-OpenID-2.2.2-7.fc19 (2013-15258)	2 Sep 201300:00	–	nessus
Tenable Nessus	openSUSE Security Update : typo3-cms-4_7 (openSUSE-2016-1002)	22 Aug 201600:00	–	nessus
Tenable Nessus	openSUSE Security Update : typo3 (openSUSE-2016-959)	12 Aug 201600:00	–	nessus
Friends Of PHP	XML External Entity (XXE) issue	12 Aug 201301:41	–	friendsofphp

Vulners

Node

openid php-openidRange<2.3.0composer

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2013-4701
github	www.github.com/openid/php-openid/commit/625c16bb28bb120d262b3f19f89c2c06cb9b0da9
jvn	www.jvn.jp/en/jp/JVN24713981/index.html
jvndb	www.jvndb.jvn.jp/jvndb/JVNDB-2013-000080
lists	www.lists.opensuse.org/opensuse-security-announce/2016-08/msg00028.html
lists	www.lists.opensuse.org/opensuse-updates/2016-08/msg00083.html
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/openid/php-openid/CVE-2013-4701.yaml
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2013-4701.yaml
typo3	www.typo3.org/security/advisory/typo3-core-sa-2014-002
github	www.github.com/advisories/GHSA-5qp6-78pr-gv8c

06 Feb 2024 13:19Current

7High risk

Vulners AI Score7

CVSS 27.5

EPSS0.02997