Description

xmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator characters into namespace URIs.

Remediation

References

CVE-2022-25236

Related Vulnerabilities

WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-0237)

WordPress Plugin Smart Slideshow 'upload.php' Arbitrary File Upload (2.1)

PHP Other Vulnerability (CVE-2012-5381)

Django CVE-2014-1418 Vulnerability (CVE-2014-1418)

Zope Web Application Server CVE-2011-2528 Vulnerability (CVE-2011-2528)

Severity

Critical

Classification

CVE-2022-25236 CWE-668 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities