CVE-2014-7839
EUVD-2022-473925.11.2014, 15:59
DocumentProvider in RESTEasy 2.3.7 and 3.0.9 does not configure the (1) external-general-entities or (2) external-parameter-entities features, which allows remote attackers to conduct XML external entity (XXE) attacks via unspecified vectors.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| redhat | resteasy | 2.3.7 |
| redhat | resteasy | 3.0.9 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Common Weakness Enumeration
References