CVE-2016-5002 in Apache Archiva
Summary
XML external entity (XXE) vulnerability in the Apache XML-RPC (aka ws-xmlrpc) library 3.1.3, as used in Apache Archiva, allows remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted DTD.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Reservation
05/24/2016
Disclosure
10/27/2017
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 90261 | Apache Archiva XML DTD Connection xml external entity reference | 611 | Proof-of-Concept | Official fix | CVE-2016-5002 |