Description

org.jboss.as.jaxrs.deployment.JaxrsIntegrationProcessor in Red Hat JBoss Enterprise Application Platform (JEAP) before 6.2.4 enables entity expansion, which allows remote attackers to read arbitrary files via unspecified vectors, related to an XML External Entity (XXE) issue.

Remediation

References

CVE-2014-3481

Related Vulnerabilities

WordPress Plugin Bangla Sidebar Login Cross-Site Scripting (1.0)

WordPress Plugin Editorial Calendar Multiple Vulnerabilities (2.6)

Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-10242)

WordPress Plugin Easy Digital Downloads-Simple eCommerce for Selling Digital Files Cross-Site Request Forgery (2.10.2)

Atlassian Jira Missing Authorization Vulnerability (CVE-2019-3399)

Severity

Medium

Classification

CVE-2014-3481 CWE-200

Tags

Missing Update Known Vulnerabilities