Описание
Davenport before 0.9.10 allows attackers to cause a denial of service (resource consumption) via (1) a very large XML file or (2) entity expansion attacks.
Ссылки
- PatchVendor Advisory
- Patch
- Patch
- Patch
- Patch
- PatchVendor Advisory
- Patch
- Patch
- Patch
- Patch
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:davenport:davenport:0.8.0:*:*:*:*:*:*:*
cpe:2.3:a:davenport:davenport:0.9.0:*:*:*:*:*:*:*
cpe:2.3:a:davenport:davenport:0.9.5:*:*:*:*:*:*:*
cpe:2.3:a:davenport:davenport:0.9.6:*:*:*:*:*:*:*
cpe:2.3:a:davenport:davenport:0.9.7:*:*:*:*:*:*:*
cpe:2.3:a:davenport:davenport:0.9.8:*:*:*:*:*:*:*
cpe:2.3:a:davenport:davenport:0.9.9:*:*:*:*:*:*:*
EPSS
Процентиль: 73%
0.01549
Низкий
5 Medium
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
github
больше 4 лет назад
Davenport before 0.9.10 allows attackers to cause a denial of service (resource consumption) via (1) a very large XML file or (2) entity expansion attacks.
EPSS
Процентиль: 73%
0.01549
Низкий
5 Medium
CVSS2
Дефекты
NVD-CWE-Other