Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2012-4399

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-5964-pq8r-4q62

CakePHPallows remote attackers to read arbitrary files via XML data containing external entity references The Xml class in CakePHP 2.1.x before 2.1.5 and 2.2.x before 2.2.1 allows remote attackers to read arbitrary files via XML data containing external entity references, aka an XML external entity (XXE) injection attack.

gitlab/packagist/cakephp/cakephp/CVE-2012-4399

CakePHPallows remote attackers to read arbitrary files via XML data containing external entity references The Xml class in CakePHP 2.1.x before 2.1.5 and 2.2.x before 2.2.1 allows remote attackers to read arbitrary files via XML data containing external entity references, aka an XML external entity (XXE) injection attack.