未評価
textpattern version version 4.6.2 contains a XML Injection vulnerability in Import XML feature that can result in Denial of service in context to the...
CVE-2018-1000090
SecPulse初出
原文の説明 取得元が公開している説明をそのまま載せています (多くは英語)。
textpattern version version 4.6.2 contains a XML Injection vulnerability in Import XML feature that can result in Denial of service in context to the web server by exhausting server memory resources. This attack appear to be exploitable via Uploading a specially crafted XML file.
参照URL
- report github.com