Bug 2229396 (TRIAGE-CVE-2023-3823) - TRIAGE-CVE-2023-3823 php: XML loading external entity without being enabled
Summary: TRIAGE-CVE-2023-3823 php: XML loading external entity without being enabled
Keywords:
Status: NEW
Alias: TRIAGE-CVE-2023-3823
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Nobody
QA Contact:
URL:
Whiteboard:
Depends On: 2230105 2230106 2230107
Blocks: 2229397
TreeView+ depends on / blocked
 
Reported: 2023-08-05 16:16 UTC by Nick Tait
Modified: 2023-08-08 20:32 UTC (History)
4 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)

Description Nick Tait 2023-08-05 16:16:25 UTC 
https://www.php.net/ChangeLog-8.php#8.0.30

    Libxml:
        Fixed bug GHSA-3qrf-m4j2-pcrr (Security issue with external entity loading in XML without enabling it). (CVE-2023-3823)
Comment 1 msiddiqu 2023-08-07 07:01:58 UTC 
Nick, Could you please raise triage trackers for this?
Note You need to log in before you can comment on or make changes to this bug.