Skip to content
OpenAdvisories

Archive

11 June 2014

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • Medium —
    CVE-2014-3004 Public exploit

    Improper Restriction of XML External Entity Reference in Castor

    The default configuration for the Xerces SAX Parser in Castor before 1.3.3 allows context-dependent attackers to conduct XML External Entity (XXE) attacks via a crafted XML document.