CVE-2018-1000090

textpattern version version 4.6.2 contains a XML Injection vulnerability in Import XML feature that can result in Denial of service in context to the web…

published March 13, 2018

CVSS
—
EPSS
1%
Percentile
71.2
In the wild
Unconfirmed
What it is

textpattern version version 4.6.2 contains a XML Injection vulnerability in Import XML feature that can result in Denial of service in context to the web server by exhausting server memory resources. This attack appear to be exploitable via Uploading a specially crafted XML file.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01344 · 71.2th percentile
Published
2018-03-13T15:00Z
EPSS history
Timeline
  • 13 MAR 15:00Z
    textpattern version version 4.6.2 contains a XML Injection vulnerability in Import XML feature that can result in Denial of service in context to the web…
    cvelistv5