GitHub Advisoryadvisory · Packagist
GHSA-cc7g-9pcj-7gwm CodeIgniter Rest Server XXE Vulnerability
CRITICAL
Official page ↗
- Aliases
- CVE-2015-3907
- Ecosystem
- Packagist
- Packages
- chriskacerguis/codeigniter-restserver
- Severity
- Critical
- CVSS vector
- CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-611
- Reviewed
- 2023-07-31
Affected packages
• Packagist chriskacerguis/codeigniter-restserver: < 2.7.2 → fixed in 2.7.2
Description
CodeIgniter Rest Server (aka codeigniter-restserver) 2.7.1 allows XXE attacks.
Related
Alias · CVE (1)
- CVE-2015-3907 CodeIgniter Rest Server (aka codeigniter-restserver) 2.7.1 allows XXE attacks. vulnerability
Weakness · CWE (1)
- CWE-611 Improper Restriction of XML External Entity Reference weakness
References
- https://nvd.nist.gov/vuln/detail/CVE-2015-3907 advisory
- https://github.com/chriskacerguis/codeigniter-restserver/issues/461 web
- https://github.com/chriskacerguis/codeigniter-restserver/commit/852740e7c636e4f44b3a8e3afc15155795e22c9b web
- https://github.com/chriskacerguis/codeigniter-restserver package
- https://kb.hitcon.org/post/127839729207/codeigniter-rest-server-module-xxe-cve-2015-3907 web