Lucene search
GoogleOSV:GO-2020-0048HistoryApr 14, 2021 - 8:04 p.m.
Denial of service in github.com/antchfx/xmlquery
2021-04-1420:04:52
Google
osv.dev
8
denial of service
xml
content-type
panic
nil pointer
user supplied urls
antchfx/xmlquery
LoadURL does not check the Content-Type of loaded resources, which can cause a panic due to nil pointer deference if the loaded resource is not XML. If user supplied URLs are loaded, this may be used as a denial of service vector.
Related
github
github
prion
prion
Format string
2020-09-16 15:15:00
osv
osv
xmlquery lacks check for whether LoadURL response is in XML format, causing denial of service
2022-10-07 07:20:03
CVE-2020-25614
2020-09-16 15:15:12
gitlab
gitlab
Improper Input Validation
2020-09-16 00:00:00
nvd
nvd
CVE-2020-25614
2020-09-16 15:15:12
cvelist
cvelist
CVE-2020-25614
2020-09-16 14:41:08
cve
cve
CVE-2020-25614
2020-09-16 15:15:12
debiancve
debiancve
CVE-2020-25614
2020-09-16 15:15:12
ubuntucve
ubuntucve
CVE-2020-25614
2020-09-16 00:00:00
veracode
veracode
Denial Of Service (DoS)
2020-09-07 10:52:06