CVE-2018-10868CWE-400

redhat-certification 7 does not properly restrict the number of recursive definitions of entities in XML documents, allowing an unauthenticated user to run a…

published May 26, 2021

CVSS
—
EPSS
1%
Percentile
65.5
In the wild
Unconfirmed
What it is

redhat-certification 7 does not properly restrict the number of recursive definitions of entities in XML documents, allowing an unauthenticated user to run a "Billion Laugh Attack" by replying to XMLRPC methods when getting the status of an host.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01104 · 65.5th percentile
Weakness
CWE-400 · Uncontrolled Resource Consumption
Published
2021-05-26T18:03Z
EPSS history
Timeline
  • 26 MAY 18:03Z
    redhat-certification 7 does not properly restrict the number of recursive definitions of entities in XML documents, allowing an unauthenticated user to run a…
    cvelistv5