CVE-2018-1000090 | BDVDB-2026-97762 Detail

Description#

textpattern version version 4.6.2 contains a XML Injection vulnerability in Import XML feature that can result in Denial of service in context to the web server by exhausting server memory resources. This attack appear to be exploitable via Uploading a specially crafted XML file.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/textpattern/textpattern/issues/1141

Exploit#

No public exploit known

History#

Version 12018-03-13Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.