0ang3el/unsafe-xmlrpc

0ang3el/unsafe-xmlrpc

GitHubGitHub
GitHubgithub.com
Releases0
Stars4
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2016-5004↗
—4.3 MEDIUM

The Content-Encoding HTTP header feature in ws-xmlrpc 3.1.3 as used in Apache Archiva allows remote attackers to cause a denial of service (resource consumption) by decompressing a large file containing zeroes.