Skip to content
Sign in Sign up
JA EN FR
SecPulse
Unrated

textpattern version version 4.6.2 contains a XML Injection vulnerability in Import XML feature that can result in Denial of service in context to the...

CVE-2018-1000090 First seen on SecPulse
Original description The description as published by the source.

textpattern version version 4.6.2 contains a XML Injection vulnerability in Import XML feature that can result in Denial of service in context to the web server by exhausting server memory resources. This attack appear to be exploitable via Uploading a specially crafted XML file.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details