VULNERABILITY INTELLIGENCE

CVE-2011-1425

CVSS score5.1 MEDIUM
EPSS probability8.06%
CISA KEVNot currently listed
Published2011-04-04
Last modified2026-06-16
CVSS vectorAV:N/AC:H/Au:N/C:P/I:P/A:P

Description

xslt.c in XML Security Library (aka xmlsec) before 1.2.17, as used in WebKit and other products, when XSLT is enabled, allows remote attackers to create or overwrite arbitrary files via vectors involving the libxslt output extension and a ds:Transform element during signature verification.

Primary references