CVE-2013-1635 (retired)

Priority
Description
ext/soap/soap.c in PHP before 5.3.22 and 5.4.x before 5.4.13 does not
validate the relationship between the soap.wsdl_cache_dir directive and the
open_basedir directive, which allows remote attackers to bypass intended
access restrictions by triggering the creation of cached SOAP WSDL files in
an arbitrary directory.
Notes
 mdeslaur> we do not support the use of open_basedir, marking as ignored
More Information

Updated: 2019-09-19 15:43:52 UTC (commit d32ebc32606b9517c6fa7d65a15441e2a57a6de5)