PT-2023-24675 · Unknown · Fast-Xml-Parser

Name of the Vulnerable Software and Affected Versions: fast-xml-parser versions prior to 4.2.4 Description: The issue allows special characters in entity names, which are not escaped or sanitized. This can be abused for denial of service DoS attacks by crafting an entity name that results in an...