| Package | Affected versions | Patched versions |
|---|---|---|
| easy-xml | ≤ 0.5.0all versions | |
| easyxml | = 0.5.0 |
The parseXML function in Easy-XML 0.5.0 was discovered to have a XML External Entity (XXE) vulnerability which allows for an attacker to expose sensitive data or perform a denial of service (DOS) via a crafted external entity entered into the XML content as input.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free