PT-2023-31426 · Typecho · Typecho
CVSS v3.1
7.5
Alta
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Typecho version 1.2.1
Description
The issue is related to an XML Quadratic Blowup attack. This attack can be executed via the component /index.php/action/xmlrpc.
Recommendations
For Typecho version 1.2.1, consider disabling the /index.php/action/xmlrpc component until a patch is available to prevent potential exploitation.
Exploit
Correção
DoS
XML Entity Expansion
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Typecho