CVE-2014-2053
1 advisory.
Packagist/james-heinrich/getid3 CVE-2014-2053: high
getID3 is vulnerable to XML External Entity (XXE)
Action: Upgrade james-heinrich/getid3 to 1.9.9 or later.
composer require james-heinrich/getid3:1.9.9Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.9.9 | - |
Fixed versions
| 1.9.9 |
Sources
- osv: GHSA-5v43-55m5-qr8f
- https://nvd.nist.gov/vuln/detail/CVE-2014-2053
- https://github.com/JamesHeinrich/getID3/commit/afbdaa044a9a0a9dff2f800bd670e231b3ec99b2
- https://github.com/FriendsOfPHP/security-advisories/blob/master/james-heinrich/getid3/CVE-2014-2053.yaml
- https://github.com/JamesHeinrich/getID3
- https://wordpress.org/news/2014/08/wordpress-3-9-2
- http://getid3.sourceforge.net/source/changelog.txt
- http://owncloud.org/about/security/advisories/oC-SA-2014-006
- http://secunia.com/advisories/58002
- http://www.debian.org/security/2014/dsa-3001
CVE-2014-2053 · published · modified · JSON