cvelist/2012/2xxx/CVE-2012-2239.json

72 lines
2.2 KiB
JSON
Raw Normal View History

2017-10-16 12:31:07 -04:00
{
2019-03-18 00:40:30 +00:00
"CVE_data_meta": {
"ASSIGNER": "security@debian.org",
"ID": "CVE-2012-2239",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
2017-10-16 12:31:07 -04:00
{
2019-03-18 00:40:30 +00:00
"lang": "eng",
"value": "Mahara 1.4.x before 1.4.4 and 1.5.x before 1.5.3 allows remote attackers to read arbitrary files or create TCP connections via an XML external entity (XXE) injection attack, as demonstrated by reading config.php."
2017-10-16 12:31:07 -04:00
}
2019-03-18 00:40:30 +00:00
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "DSA-2591",
"refsource": "DEBIAN",
"url": "http://www.debian.org/security/2012/dsa-2591"
},
{
"name": "https://bugs.launchpad.net/mahara/+bug/1047111",
"refsource": "CONFIRM",
"url": "https://bugs.launchpad.net/mahara/+bug/1047111"
},
{
"name": "https://mahara.org/interaction/forum/topic.php?id=4869",
"refsource": "CONFIRM",
"url": "https://mahara.org/interaction/forum/topic.php?id=4869"
}
]
}
}