JAX-RS: Information disclosure via XML eXternal Entity (XXE)

It was found that the default context parameters as provided to RESTEasy deployments by JBoss EAP did not explicitly disable external entity expansion for RESTEasy. A remote attacker could use this flaw to perform XML External Entity XXE attacks on RESTEasy applications accepting XML input...

libxml2 Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/31555/info The libxml2 library is prone to a denial-of-service vulnerability caused by an error when handling files using entities in entity definitions. An attacker can exploit this issue to cause the library to consume ...

GLSA-200812-06 : libxml2: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200812-06 libxml2: Multiple vulnerabilities Multiple vulnerabilities were reported in libxml2: Andreas Solberg reported that libxml2 does not properly detect recursion during entity expansion in an attribute value CVE-2008-3281. A...

libxml2 - Denial of Service

libxml2 - Denial of Service source: https://www.securityfocus.com/bid/31555/info The libxml2 library is prone to a denial-of-service vulnerability caused by an error when handling files using entities in entity definitions. An attacker can exploit this issue to cause the library to consume an...