Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
added 2024/05/30 12:49 a.m.17 views

Symfony XXE security vulnerability

Symfony 2.0.11 carried a similar XXE security fix, however, on review of ZF2 I also noted a vulnerability to XML Entity Expansion XEE attacks whereby all extensions making use of libxml2 have no defense against XEE Quadratic Blowup Attacks. The vulnerability is a function of there being no curren...

7.2AI score
SaveExploits0References4Affected Software1
Rows per page
Query Builder