← volver
CVE-2012-4554

CVE-2012-4554

EPSS 15.8%
The OpenID module in Drupal 7.x before 7.16 allows remote OpenID servers to read arbitrary files via a crafted DOCTYPE declaration in an XRDS file.
Productos afectados
n/a · n/a

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →
Referencias
http://drupalcode.org/project/drupal.git/commit/b912710http://drupal.org/node/1815912http://www.openwall.com/lists/oss-security/2012/10/29/4http://www.openwall.com/lists/oss-security/2012/10/30/5