Openid Php-Openid vulnerabilities

1 known vulnerability affecting openid/php-openid.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1

Vulnerabilities

Page 1 of 1

CVE-2013-4701HIGH≥ 0, < 2.3.02022-05-17

CVE-2013-4701 [HIGH] CWE-400 PHP OpenID Library Denial of Service vulnerability PHP OpenID Library Denial of Service vulnerability Auth/Yadis/XML.php in PHP OpenID Library 2.2.2 and earlier allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service (CPU and memory consumption) via XRDS data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.