A low level vulnerability has been found in the SilverStripe framework, where the Quadratic Blowup Attack could potentially be exploited to affect the performance of a site.

See http://mashable.com/2014/08/06/wordpress-xml-blowup-dos/ for a writeup.

References

• silverstripe/silverstripe-framework@7f983c2
• https://github.com/FriendsOfPHP/security-advisories/blob/master/silverstripe/framework/SS-2014-017-1.yaml
• https://www.silverstripe.org/software/download/security-releases/ss-2014-017-xml-quadratic-blowup-attack