Lucene search

CVE-2014-1439

🗓️ 05 Feb 2014 19:28:55Reported by [email protected]Type

The libxml_disable_entity_loader function in HipHop Virtual Machine for PHP (HHVM) before 2.4.0 and 2.3.x before 2.3.3 allows XXE attack

Reporter	Title	Published	Views	Family All 3
Cvelist	CVE-2014-1439	5 Feb 201419:00	–	cvelist
Prion	Xxe	5 Feb 201419:55	–	prion
CVE	CVE-2014-1439	5 Feb 201419:55	–	cve

Nvd

Node

hiphop_virtual_machine_for_php_project hiphop_virtual_machine_for_phpRange≤2.3.2

hiphop_virtual_machine_for_php_project hiphop_virtual_machine_for_phpMatch2.0.0

hiphop_virtual_machine_for_php_project hiphop_virtual_machine_for_phpMatch2.0.1

hiphop_virtual_machine_for_php_project hiphop_virtual_machine_for_phpMatch2.0.2

hiphop_virtual_machine_for_php_project hiphop_virtual_machine_for_phpMatch2.1.0

hiphop_virtual_machine_for_php_project hiphop_virtual_machine_for_phpMatch2.2.0

hiphop_virtual_machine_for_php_project hiphop_virtual_machine_for_phpMatch2.3.0

hiphop_virtual_machine_for_php_project hiphop_virtual_machine_for_phpMatch2.3.1

Source	Link
hhvm	www.hhvm.com/blog/3287/hhvm-2-4-0
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/90979
github	www.github.com/facebook/hhvm/commit/95f96e7287effe2fcdfb9a5338d1a7e4f55b083b

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

05 Feb 2014 19:55Current

6.8Medium risk

Vulners AI Score6.8

CVSS25

EPSS0.003