CVE-2014-3004
EUVD-2022-445511.06.2014, 14:55
The default configuration for the Xerces SAX Parser in Castor before 1.3.3 allows context-dependent attackers to conduct XML External Entity (XXE) attacks via a crafted XML document.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| castor_project | castor | 𝑥 ≤ 1.3.2 |
| castor_project | castor | 1.3 |
| castor_project | castor | 1.3.1 |
| opensuse | opensuse | 13.1 |
| opensuse_project | opensuse | 12.3 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| castor |
|
References