php-saml-sp before 1.1.1 and 2.x... CVE-2023-26267

- AV AC AU C I A
发布： 2023-02-21
修订： 2023-03-02

php-saml-sp before 1.1.1 and 2.x before 2.1.1 allows reading arbitrary files as the webserver user because resolving XML external entities was silently enabled via \LIBXML_DTDLOAD | \LIBXML_DTDATTR.

0%

漏洞利用/PoC

暂无可用Exp或PoC

受影响的平台与产品

当前有2条受影响产品信息