| Package | Affected versions | Patched versions |
|---|---|---|
| djabberd | = 0.80= 0.81= 0.82= 0.83≤ 0.84 |
DJabberd 0.84 and earlier does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free