phpxmlrpc vulnerable to argument injection

GHSA ID

GHSA-q7qq-9gx2-ggxv

Severity

medium

Published

2022-12-02T22:26:45Z

Updated

2023-01-12T05:06:54Z

Description

CWEs

• CWE-88 · Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')

References

• https://github.com/gggeek/phpxmlrpc/issues/81 ↗
• https://github.com/FriendsOfPHP/security-advisories/blob/master/phpxmlrpc/phpxmlrpc/2022-11-28-1.yaml ↗
• https://github.com/gggeek/phpxmlrpc/releases/tag/4.9.0 ↗
• https://github.com/advisories/GHSA-q7qq-9gx2-ggxv ↗