WS-2013-0014

Denial of Service attack in rpc4django 0.1.8 before 0.2.3 via the xml.dom.minidom.parseString function...

Denial Of Service (DoS)

rpc4django is vulnerable to denial of service DoS attacks. To detect if the incoming request is XMLRPC or JSONRPC, rpc4django uses xml.dom.minidom.parseString which is vulnerable. A malicious user can create a malicious XML payload which will consume all the memory on the server...