5.5
CVE-2011-2206
- EPSS 0.73%
- Veröffentlicht 22.06.2011 22:55:04
- Zuletzt bearbeitet 11.04.2025 00:51:21
- Quelle secalert@redhat.com
- CVE-Watchlists
- Unerledigt
LoginXMLParser.pm in DJabberd before 0.85 allows remote authenticated users to read arbitrary files, and possibly send HTTP requests to intranet servers or cause a denial of service (CPU and memory consumption), via an XML external entity declaration in conjunction with an entity reference, a different vulnerability than CVE-2011-1757.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Brad Fitzpatrick ≫ Djabberd Version <= 0.84
Brad Fitzpatrick ≫ Djabberd Version0.80
Brad Fitzpatrick ≫ Djabberd Version0.81
Brad Fitzpatrick ≫ Djabberd Version0.82
Brad Fitzpatrick ≫ Djabberd Version0.83
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.73% | 0.702 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 5.5 | 8 | 4.9 |
AV:N/AC:L/Au:S/C:P/I:N/A:P
|