Pachno 安全漏洞

Pachno is an open-source collaboration platform developed by Pachno. Version 1.0.6 of Pachno contains a security vulnerability, which stems from insecure XML parsing. This vulnerability could allow unverified attackers to read arbitrary files...

The vulnerability of the libexpat function in the C language library, which is used for performing XML parsing, allows an attacker to cause a denial-of-service attack.

The vulnerability of the libexpat function in the C language library for performing XML parsing in Expat involves the XML parser itself, which consumes a large amount of memory and CPU resources. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

php: xml_parse_into_struct buffer overflow when parsing deeply nested XML

ext/xml/xml.c in PHP before 5.3.27 does not properly consider parsing depth, which allows remote attackers to cause a denial of service heap memory corruption or possibly have unspecified other impact via a crafted document that is processed by the xmlparseintostruct function...