CVE-2014-0171 | BDVDB-2026-67364 Detail

Description#

XML external entity (XXE) vulnerability in StaxXMLFactoryProvider2 in Odata4j, as used in Red Hat JBoss Data Virtualization before 6.0.0 patch 4, allows remote attackers to read arbitrary files via a crafted request to a REST endpoint.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://rhn.redhat.com/errata/RHSA-2015-0034.html
https://issues.jboss.org/browse/TEIID-2911

Exploit#

No public exploit known

History#

Version 12015-01-15Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.