VYPR

getid3

by MediaWiki

CVEs (1)

  • CVE-2014-9487CriOct 17, 2017
    risk 0.64cvss 9.8epss 0.02

    The getid3 library in MediaWiki before 1.24.1, 1.23.8, 1.22.15 and 1.19.23 allows remote attackers to read arbitrary files, cause a denial of service, or possibly have other impact via an XML External Entity (XXE) attack. NOTE: Related to CVE-2014-2053.