CVE-2014-5325

CVE-2014-5325 affects Direct Web Remoting (DWR) prior to fixed versions. The vulnerability stems from XML External Entity (XXE) handling in DWR’s DOMConverter, JDOMConverter, DOM4JConverter, and XOMConverter, allowing remote attackers to read arbitrary files via XML data that contains an external...