CVE-2018-1000090 - textpattern version version 4.6.2 contains a XML Injection vulnerability in Import XML feature that can result in Denial of service in context to the web server by exhausting server memory resources

Back Back to CVE browser

HIGH

textpattern version version 4.6.2 contains a XML Injection vulnerability in Import XML feature that can result in Denial of service in context to the web server by exhausting server memory resources

Published Mar 13, 2018

7.5

HIGH

CVSS 3.0

EPSS 1.34%

Description

textpattern version version 4.6.2 contains a XML Injection vulnerability in Import XML feature that can result in Denial of service in context to the web server by exhausting server memory resources. This attack appear to be exploitable via Uploading a specially crafted XML file.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-611

XXE

References (1)

https://github.com/textpattern/textpattern/issues/1141
x_refsource_MISCExploitIssue TrackingThird Party Advisory

Link	Providers	Tags
https://github.com/textpattern/textpattern/issues/1141		x_refsource_MISCExploitIssue TrackingThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Mar 13, 2018

Updated Aug 5, 2024

Reserved Feb 21, 2018

Link CVE-2018-1000090

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2018-1000090

Red Hat

Severity n/a

Public date n/a

Links CVE-2018-1000090