CVE-2016-5002

CVE-2016-5002 concerns the Apache XML-RPC (ws-xmlrpc) library 3.1.3 as used by Apache Archiva. The vulnerability is an XML external entity (XXE) issue that allows a remote attacker to trigger server-side request forgery (SSRF) via a crafted DTD. The connected Nessus/Gentoo advisories corroborate ...