CVE-2023-49967

Typecho v1.2.1 was discovered to be vulnerable to an XML Quadratic Blowup attack via the component /index.php/action/xmlrpc...

CVE-2023-49967

CVE-2023-49967 affects Typecho v1.2.1. The flaw is an XML Quadratic Blowup attack exploitable via the /index.php/action/xmlrpc endpoint, impacting availability (NVD base score 7.5). The cited sources consistently describe Typecho v1.2.1 as vulnerable to this specific XML-bursting issue. Remediati...