Skip to content
OpenAdvisories

Package · Ubuntu

castor

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium —
    CVE-2014-3004 Public exploit

    Improper Restriction of XML External Entity Reference in Castor

    The default configuration for the Xerces SAX Parser in Castor before 1.3.3 allows context-dependent attackers to conduct XML External Entity (XXE) attacks via a crafted XML document.

    castor:castor castor org.codehaus.castor:castor Ubuntu Maven