Description

XML external entity (XXE) vulnerability in the Java XML processing functionality in Play before 2.2.6 and 2.3.x before 2.3.5 might allow remote attackers to read arbitrary files, cause a denial of service, or have unspecified other impact via crafted XML data.

Remediation

References

CVE-2014-3630

Related Vulnerabilities

WordPress Plugin WordPress Users 'uid' Parameter SQL Injection (1.3)

WordPress Plugin Insert or Embed Articulate Content into WordPress Security Bypass (4.2996)

WordPress Plugin Import and export users and customers Multiple Vulnerabilities (1.14.0.2)

OpenSSL Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2015-0206)

MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-51704)

Severity

Critical

Classification

CVE-2014-3630 CWE-611 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities