CVE-2012-4399

The Xml class in CakePHP 2.1.x before 2.1.5 and 2.2.x before 2.2.1 allows remote attackers to read arbitrary files via XML data containing external entity…

published October 9, 2012

CVSS
—
EPSS
12%
Percentile
96.1
In the wild
Unconfirmed
What it is

The Xml class in CakePHP 2.1.x before 2.1.5 and 2.2.x before 2.2.1 allows remote attackers to read arbitrary files via XML data containing external entity references, aka an XML external entity (XXE) injection attack.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.12091 · 96.1th percentile
Published
2012-10-09T23:00Z
EPSS history
Timeline
  • 09 OCT 23:00Z
    The Xml class in CakePHP 2.1.x before 2.1.5 and 2.2.x before 2.2.1 allows remote attackers to read arbitrary files via XML data containing external entity…
    cvelistv5