p PatchFirst

GHSA-g43w-98wp-m694

GHSA-g43w-98wp-m694 · SilverStripe framework XML Quadratic Blowup Attack

This page contains facts from public vulnerability sources. Check the original advisory before updating.

A low level vulnerability has been found in the SilverStripe framework, where the Quadratic Blowup Attack could potentially be exploited to affect the performance of a site. See http://mashable.com/2014/08/06/wordpress-xml-blowup-dos/ for a writeup.

CVSS 5.3 · Medium · Fix available

Published
Updated

Stack: php

Affected products and versions

  • silverstripe/framework Packagist

    Versions
    • 2.4.10
    • 2.4.11
    • 2.4.12
    • 2.4.13
    • 2.4.9
    • 2.5.0
    • 3.0.10
    • 3.0.10-rc1
    • 3.0.11
    • 3.0.11-rc1
    • 3.0.12
    • 3.0.13
    • 3.0.14
    • 3.0.2.1
    • 3.0.3
    • 3.0.3-rc1
    • 3.0.3-rc2
    • 3.0.4
    • 3.0.5
    • 3.0.6
    • 3.0.6-rc1
    • 3.0.6-rc2
    • 3.0.7
    • 3.0.7-rc1
    • 3.0.8
    • 3.0.9
    • 3.0.9-rc1
    • 3.1.0
    • 3.1.0-beta1
    • 3.1.0-beta2
    • 3.1.0-beta3
    • 3.1.0-rc1
    • 3.1.0-rc2
    • 3.1.0-rc3
    • 3.1.1
    • 3.1.10
    • 3.1.10-rc1
    • 3.1.10-rc2
    • 3.1.11
    • 3.1.11-rc1
    • 3.1.2
    • 3.1.2-rc1
    • 3.1.3
    • 3.1.3-rc1
    • 3.1.3-rc2
    • 3.1.4
    • 3.1.4-rc1
    • 3.1.5
    • 3.1.5-rc1
    • 3.1.6
    • 3.1.6-rc1
    • 3.1.6-rc2
    • 3.1.6-rc3
    • 3.1.7
    • 3.1.7-rc1
    • 3.1.8
    • 3.1.9
    • 3.1.9-rc1
    Affected ranges
    • ECOSYSTEM: < 3.1.12

    Update to 3.1.12

Original sources

Check your server →