1 matches found
Denial Of Service (DoS)
rpc4django is vulnerable to denial of service DoS attacks. To detect if the incoming request is XMLRPC or JSONRPC, rpc4django uses xml.dom.minidom.parseString which is vulnerable. A malicious user can create a malicious XML payload which will consume all the memory on the server...