CVE-2014-0030

The XML-RPC protocol support in Apache Roller before 5.0.3 allows attackers to conduct XML External Entity (XXE) attacks via unspecified vectors.

Score

CVSS 3.0 9.8 Critical

Status

Modified - secalert@redhat.com

Published

2017-10-10

Last modified

2024-08-06

Weaknesses

CWE-611

Affected products

• Roller (Apache)

References

• https://liftsecurity.io/advisories/Apache_Roller_XML-RPC_susceptible_to_XXE/
• https://mail-archives.apache.org/mod_mbox/roller-dev/201401.mbox/%3CCAF1aazCMzDGB12Ls4t-SOwNA=OdguD010LX3yZGhk2GQHafFXw…
• https://www.exploit-db.com/exploits/45341/