/
3004.yaml
44 lines (44 loc) · 2.65 KB
/
3004.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
cve: 2014-3004
title: "castor: XML External Entity (XXE) attacks via a crafted XML document"
cvss_v2: 5.0
references:
- https://bugzilla.redhat.com/CVE-2014-3004
- http://seclists.org/fulldisclosure/2014/May/142
affected:
- groupId: "org.codehaus.castor"
artifactId: "castor"
version:
- "<=1.3.3-rc1"
fixedin:
- ">=1.3.3"
- groupId: "org.codehaus.castor"
artifactId: "castor-xml"
version:
- "<=1.3.3-rc1"
fixedin:
- ">=1.3.3"
package_urls:
- http://central.maven.org/maven2/org/codehaus/castor/castor/1.0.5/castor-1.0.5.jar
- http://central.maven.org/maven2/org/codehaus/castor/castor/1.3rc1/castor-1.3rc1.jar
- http://central.maven.org/maven2/org/codehaus/castor/castor/1.1-M2/castor-1.1-M2.jar
- http://central.maven.org/maven2/org/codehaus/castor/castor/1.3.3-rc1/castor-1.3.3-rc1.jar
- http://central.maven.org/maven2/org/codehaus/castor/castor/1.3/castor-1.3.jar
- http://central.maven.org/maven2/org/codehaus/castor/castor/1.1.1/castor-1.1.1.jar
- http://central.maven.org/maven2/org/codehaus/castor/castor/1.3.1/castor-1.3.1.jar
- http://central.maven.org/maven2/org/codehaus/castor/castor/1.3.0.1/castor-1.3.0.1.jar
- http://central.maven.org/maven2/org/codehaus/castor/castor/1.1-M1/castor-1.1-M1.jar
- http://central.maven.org/maven2/org/codehaus/castor/castor/1.3.2/castor-1.3.2.jar
- http://central.maven.org/maven2/org/codehaus/castor/castor/1.2/castor-1.2.jar
- http://central.maven.org/maven2/org/codehaus/castor/castor/1.3.3/castor-1.3.3.jar
- http://central.maven.org/maven2/org/codehaus/castor/castor/1.1/castor-1.1.jar
- http://central.maven.org/maven2/org/codehaus/castor/castor/1.0.4/castor-1.0.4.jar
- http://central.maven.org/maven2/org/codehaus/castor/castor/1.1.2.1/castor-1.1.2.1.jar
- http://central.maven.org/maven2/org/codehaus/castor/castor/1.1.2/castor-1.1.2.jar
- http://central.maven.org/maven2/org/codehaus/castor/castor/1.1-M3/castor-1.1-M3.jar
- http://central.maven.org/maven2/org/codehaus/castor/castor-xml/1.3.3/castor-xml-1.3.3.jar
- http://central.maven.org/maven2/org/codehaus/castor/castor-xml/1.3rc1/castor-xml-1.3rc1.jar
- http://central.maven.org/maven2/org/codehaus/castor/castor-xml/1.3/castor-xml-1.3.jar
- http://central.maven.org/maven2/org/codehaus/castor/castor-xml/1.3.1/castor-xml-1.3.1.jar
- http://central.maven.org/maven2/org/codehaus/castor/castor-xml/1.3.0.1/castor-xml-1.3.0.1.jar
- http://central.maven.org/maven2/org/codehaus/castor/castor-xml/1.3.3-rc1/castor-xml-1.3.3-rc1.jar
- http://central.maven.org/maven2/org/codehaus/castor/castor-xml/1.3.2/castor-xml-1.3.2.jar