CVE-2016-5002 in Apache Archiva
Сводка (Английский)
XML external entity (XXE) vulnerability in the Apache XML-RPC (aka ws-xmlrpc) library 3.1.3, as used in Apache Archiva, allows remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted DTD.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Резервировать
24.05.2016
Раскрытие
27.10.2017
Записи
VulDB provides additional information and datapoints for this CVE:
| ИД | Уязвимость | CWE | Экс | Кон | CVE |
|---|---|---|---|---|---|
| 90261 | Apache Archiva XML DTD Connection XML External Entity | 611 | Доказательство концепции | Официальное исправление | CVE-2016-5002 |