GitHub Advisoryadvisory · Packagist

GHSA-229x-22xc-2f2w Zendframework Local file disclosure via XXE injection in Zend_XmlRpc

HIGH Published 2024-06-07 Modified 2024-06-07 Official page ↗
Ecosystem
Packagist
Packages
zendframework/zendframework1
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Weaknesses
CWE-611
Reviewed
2024-06-07

Affected packages

• Packagist zendframework/zendframework1: >= 1.0.0, < 1.11.13 → fixed in 1.11.13

Description

Zend_XmlRpc is vulnerable to XML eXternal Entity (XXE) Injection attacks. The SimpleXMLElement class (SimpleXML PHP extension) is used in an insecure way to parse XML data. External entities can be specified by adding a specific DOCTYPE element to XML-RPC requests. By exploiting this vulnerability an application may be coerced to open arbitrary files and/or TCP connections.

Related

Weakness · CWE (1)

  • CWE-611 Improper Restriction of XML External Entity Reference weakness

References