opOpenSocialPlugin Multiple XML External Entity Injection Vulnerabilities
BID:62287
CVE-2013-4335 |Info
opOpenSocialPlugin Multiple XML External Entity Injection Vulnerabilities
| Bugtraq ID: | 62287 |
| Class: | Input Validation Error |
| CVE: |
CVE-2013-4335 |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 10 2013 12:00AM |
| Updated: | Sep 16 2013 12:12AM |
| Credit: | Kosuke Ebihara |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
opOpenSocialPlugin Multiple XML External Entity Injection Vulnerabilities
opOpenSocialPlugin is prone to multiple XML External Entity injection vulnerabilities.
Successfully exploiting these issues may allow an attacker to obtain potentially sensitive information or cause denial-of-service conditions. This may lead to further attacks.
opOpenSocialPlugin is prone to multiple XML External Entity injection vulnerabilities.
Successfully exploiting these issues may allow an attacker to obtain potentially sensitive information or cause denial-of-service conditions. This may lead to further attacks.
Exploit / POC
opOpenSocialPlugin Multiple XML External Entity Injection Vulnerabilities
An attacker can exploit these issues using a web browser.
An attacker can exploit these issues using a web browser.
Solution / Fix
opOpenSocialPlugin Multiple XML External Entity Injection Vulnerabilities
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
opOpenSocialPlugin Multiple XML External Entity Injection Vulnerabilities
References:
References: