CVE-2013-1635

Priority
Description
ext/soap/soap.c in PHP before 5.3.22 and 5.4.x before 5.4.13 does not
validate the relationship between the soap.wsdl_cache_dir directive and the
open_basedir directive, which allows remote attackers to bypass intended
access restrictions by triggering the creation of cached SOAP WSDL files in
an arbitrary directory.
Notes
 mdeslaur> we do not support the use of open_basedir, marking as ignored
More Information

Updated: 2019-01-14 22:08:18 UTC (commit 51f9b73af244ba86b9321e46e526586c25a8e060)