Lucene search
+L

1 matches found

OSV
OSV
added 2024/05/30 12:21 p.m.20 views

GHSA-Q2GC-GG3X-7942 Symfony XML Entity Expansion security vulnerability

Symfony 2.0.11 carried a similar XXE security fix, however, on review of ZF2 I also noted a vulnerability to XML Entity Expansion XEE attacks whereby all extensions making use of libxml2 have no defense against XEE Quadratic Blowup Attacks. The vulnerability is a function of there being no curren...

7.5CVSS7.2AI score
SaveExploits0References5
Rows per page
Query Builder