XML External Entity (XXE)

symphonycms/symphony-2 is vulnerable XML External Entity XXE. The vulnerability exists due to lack of disabling external entity in the function convertFromXMLString of symphony\lib\toolkit\class.xmlelement.php...

CVE-2020-25912

A XML External Entity XXE vulnerability was discovered in symphony\lib\toolkit\class.xmlelement.php in Symphony 2.7.10 which can lead to an information disclosure or denial of service DOS...

CVE-2020-25912: Improper Restriction of XML External Entity Reference

A XML External Entity XXE vulnerability was discovered in symphony\lib\toolkit\class.xmlelement.php in Symphony 2.7.10 which can lead to an information disclosure or denial of service DOS...