Files
CVEs-PoC/2011/CVE-2011-2205.md
2025-09-29 21:09:30 +02:00

789 B

CVE-2011-2205

Description

Prosody before 0.8.1 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564.

POC

Reference

No PoCs from references.

Github