Vulnerabilities

TI-2011-01928 CVE-2011-2206 · GHSA-r2jf-vq9h-96p6

XMLParser.pm in DJabberd before 0.85 allows remote authenticated users to read arbitrary…

LOW 27

XMLParser.pm in DJabberd before 0.85 allows remote authenticated users to read arbitrary files, and possibly send HTTP requests to intranet servers or cause a denial of service (CPU and memory consumption), via an XML ex…

CVSS 2.0MEDIUM 5.5 Network Low privileges Interaction — EPSS 0.01282 Published 2011-06-22 No fix listed CWE-399

TI-2011-01536 CVE-2011-1757 · GHSA-4p35-7jx5-47jq

DJabberd 0.84 and earlier does not properly detect recursion during entity expansion…

LOW 25

DJabberd 0.84 and earlier does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01118 Published 2011-06-21 No fix listed CWE-399

Vulnerabilities

Filters

XMLParser.pm in DJabberd before 0.85 allows remote authenticated users to read arbitrary…

DJabberd 0.84 and earlier does not properly detect recursion during entity expansion…