Lucene search
PRIOn knowledge basePRION:CVE-2014-5325HistoryNov 24, 2014 - 2:59 a.m.
Xxe
2014-11-2402:59:00
PRIOn knowledge base
www.prio-n.com
6
The (1) DOMConverter, (2) JDOMConverter, (3) DOM4JConverter, and (4) XOMConverter functions in Direct Web Remoting (DWR) through 2.0.10 and 3.x through 3.0.RC2 allow remote attackers to read arbitrary files via DOM data containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
| CPE | Name | Operator | Version |
|---|---|---|---|
| direct_web_remoting | eq | 3.0 rc1 | |
| direct_web_remoting | le | 2.0.10 | |
| direct_web_remoting | eq | 3.0 rc2 |
Related
nvd
nvd
CVE-2014-5325
2014-11-24 02:59:01
jvn
jvn
cvelist
cvelist
CVE-2014-5325
2014-11-24 02:00:00
github
github
cve
cve
CVE-2014-5325
2014-11-24 02:59:01
osv
osv
