Description
XMLBundle version 0.1.7 is vulnerable to XXE attacks which can result in denial of service attacks.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | desperado/xml-bundle | <= 0.1.7 | — | GHSA-qvwf-w35m-6r95 |
High · 7.5
CVE-2017-1000477
EUVD-2022-5041GHSA-qvwf-w35m-6r95
XXE Vulnerability in XMLBundle 0.1.7
Published Jan 3, 2018 · Updated Sep 16, 2024 · Assigned by mitre