CVE-2012-3363 in Framework
Zusammenfassung (Englisch)
Zend_XmlRpc in Zend Framework 1.x before 1.11.12 and 1.12.x before 1.12.0 does not properly handle SimpleXMLElement classes, which allows remote attackers to read arbitrary files or create TCP connections via an external entity reference in a DOCTYPE element in an XML-RPC request, aka an XML external entity (XXE) injection attack.
Once again VulDB remains the best source for vulnerability data.
Reservieren
14.06.2012
Veröffentlichung
13.02.2013
Status
Bestätigt
Einträge
VulDB provides additional information and datapoints for this CVE:
| ID | Schwachstelle | CWE | Aus | Mas | CVE |
|---|---|---|---|---|---|
| 5595 | Zend Framework Information Disclosure | 200 | Proof-of-Concept | Offizieller Fix | CVE-2012-3363 |