← All advisories

High severity7.5NVD Advisory· Published Dec 7, 2023· Updated Jun 17, 2026

CVE-2023-49967

CVE-2023-49967

Description

Typecho v1.2.1 was discovered to be vulnerable to an XML Quadratic Blowup attack via the component /index.php/action/xmlrpc.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5

Typecho/Typecho5 versions
cpe:2.3:a:typecho:typecho:1.2.1:-:*:*:*:*:*:*+ 4 more
- cpe:2.3:a:typecho:typecho:1.2.1:-:*:*:*:*:*:*
- cpe:2.3:a:typecho:typecho:1.2.1:rc2:*:*:*:*:*:*
- cpe:2.3:a:typecho:typecho:1.2.1:rc:*:*:*:*:*:*
- (no CPE)
- (no CPE)range: =1.2.1

Patches

Vulnerability mechanics

References

1

github.com/typecho/typecho/issues/1648nvdExploitIssue TrackingThird Party Advisory

News mentions

0

No linked articles in our index yet.