CVE-2021-41559

Silverstripe silverstripe/framework 4.8.1 has a quadratic blowup in Convert::xml2array() that enables a remote attack via a crafted XML document

published June 28, 2022

CVSS
—
EPSS
1%
Percentile
64.3
In the wild
Unconfirmed
What it is

Silverstripe silverstripe/framework 4.8.1 has a quadratic blowup in Convert::xml2array() that enables a remote attack via a crafted XML document.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01061 · 64.3th percentile
Published
2022-06-28T21:27Z
EPSS history
Timeline
  • 28 JUN 21:27Z
    Silverstripe silverstripe/framework 4.8.1 has a quadratic blowup in Convert::xml2array() that enables a remote attack via a crafted XML document
    cvelistv5