VWE-2010-0074-2 Printable Version

Common Name	None
VWE-ID	VWE-2010-0074-2
Related Report	None
Severity	MEDIUM
Exploit Difficulty	NORMAL
Platform	Affects all platforms supported by the vulnerable versions.
Description	Denial of Service amplification. The template parser attempts to resolve templates nested to an infinite depth.
Discovered	September 22, 2010
Resolved	September 30, 2010
Patches Available	2.5.7 Patch level 3

The versions listed below are known to be affected by this issue. If you are using one of those versions, you should update to a newer release that has no known vulnerabilities.