CVE-2023-49967

Published December 7th, 2023

View on NVD ↗

CVSS v3

7.5

HIGH

CVSS v2

N/A

Affected

1

PROJECT

Description

Typecho v1.2.1 was discovered to be vulnerable to an XML Quadratic Blowup attack via the component /index.php/action/xmlrpc.

typecho/typecho

A PHP Blogging Platform. Simple and Powerful.

GitHub

12.4K