Описание
robrichards/xmlseclibs XPath injection
A vulnerability has been identified in the robrichards/xmlseclibs library, specifically related to XPath injection. The issue arises from inadequate filtering of user input before it is incorporated into XPath expressions.
Пакеты
Наименование
robrichards/xmlseclibs
composer
Затронутые версииВерсия исправления
>= 1.0.0, < 3.0.2
3.0.2
7.5 High
CVSS3
Дефекты
CWE-91
7.5 High
CVSS3
Дефекты
CWE-91