GHSA-qffc-gwpp-m2xr
Suggest an improvement- Source
- https://github.com/advisories/GHSA-qffc-gwpp-m2xr
- Import Source
- https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/06/GHSA-qffc-gwpp-m2xr/GHSA-qffc-gwpp-m2xr.json
- JSON Data
- https://api.osv.dev/v1/vulns/GHSA-qffc-gwpp-m2xr
- Published
- 2024-06-04T14:47:00Z
- Modified
- 2024-12-01T05:44:07.735721Z
- Summary
- XML External Entity (XXE) Processing in TYPO3 Core
- Details
-
All XML processing within the TYPO3 CMS are vulnerable to XEE processing. This can lead to load internal and/or external (file) content within an XML structure. Furthermore it is possible to inject arbitrary files for an XML Denial of Service attack. For more information on that topic see https://www.owasp.org/index.php/XMLExternalEntity(XXE)Processing.
- Database specific
{ "nvd_published_at": null, "cwe_ids": [], "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2024-06-04T14:47:00Z" }- References