CVE-2014-3629

Опубликовано: 17 нояб. 2014

Источник: debian

EPSS Низкий

Описание

XML external entity (XXE) vulnerability in the XML Exchange module in Apache Qpid 0.30 allows remote attackers to cause outgoing HTTP connections via a crafted message.

Пакеты

Пакет	Статус	Версия исправления	Релиз	Тип
qpid-cpp	removed			package
qpid-cpp	no-dsa		wheezy	package

Примечания

https://issues.apache.org/jira/secure/attachment/12680198/QPID-6218.patch

EPSS

Процентиль: 93%

0.06918

Низкий

Связанные уязвимости

CVE-2014-3629

ubuntu

больше 11 лет назад

XML external entity (XXE) vulnerability in the XML Exchange module in Apache Qpid 0.30 allows remote attackers to cause outgoing HTTP connections via a crafted message.

CVE-2014-3629

redhat

почти 12 лет назад

XML external entity (XXE) vulnerability in the XML Exchange module in Apache Qpid 0.30 allows remote attackers to cause outgoing HTTP connections via a crafted message.

CVE-2014-3629

nvd

больше 11 лет назад

XML external entity (XXE) vulnerability in the XML Exchange module in Apache Qpid 0.30 allows remote attackers to cause outgoing HTTP connections via a crafted message.

GHSA-mm2c-whrj-39qm

github

около 4 лет назад

XML external entity (XXE) vulnerability in the XML Exchange module in Apache Qpid 0.30 allows remote attackers to cause outgoing HTTP connections via a crafted message.

EPSS

Процентиль: 93%

0.06918

Низкий