MariaDB · Report #386160
xmlrpc.php on mariadb.org can lead to DDOS and brute force attacks
Validstatus
lowseverity
10upvotes
12 Oct 2018disclosed
Summary
XMLRPC was enabled and accessible on our website. Since we don't need any of the functionality provided by the Wordpress XMLRPC protocol, we were already trying to block XMLRPC requests to our site via our web server configuration, however, due to a syntactic error our enforcing rule did not apply.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.