CodeIgniter Rest Server XXE Vulnerability

심각 9.8CVE-2015-3907 · GHSA-cc7g-9pcj-7gwm · Published 03/07/2019 · updated 17/06/2026

요약

CVE-2015-3907은(는) chriskacerguis/codeigniter-restserver, codeigniter-restserver (codeigniter-restserver project)에 영향을 주는 심각 (CVSS 9.8) 취약점입니다.
향후 30일 내 악용 확률(EPSS): 1.6%, 전체 취약점의 76.5%보다 높음.
조치: 2.7.2 이상으로 업데이트하세요.

Package	Affected versions	Patched versions
chriskacerguis/codeigniter-restserver Packagist	`< 2.7.2`	`2.7.2`
codeigniter-restserver codeigniter-restserver_project	`= 2.7.1`	No fix yet

CodeIgniter Rest Server (aka codeigniter-restserver) 2.7.1 allows XXE attacks.

NVD description

CodeIgniter Rest Server (aka codeigniter-restserver) 2.7.1 allows XXE attacks.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.