Internet Bug Bounty · Report #477897

buffer overread in base64 code of the xmlrpc module

Validstatus

mediumseverity

$500bounty

2upvotes

9 Nov 2020disclosed

How it was found

Malformed input to the xmlrpc_decode function can cause an out of bounds read in the base64 code.

This is fixed in the latest updates of PHP (7.3.1 etc.)

If the attacker has access to the decoded output this may leak memory contents.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original