Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2014-7839

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-pc54-pchm-xcw6

XML External Entity Reference in RESTEasy DocumentProvider in RESTEasy 2.3.7 and 3.0.9 does not configure the (1) external-general-entities or (2) external-parameter-entities features, which allows remote attackers to conduct XML external entity (XXE) attacks via unspecified vectors.

gitlab/maven/org.jboss.resteasy/resteasy-jaxrs/CVE-2014-7839

External entities expanded by DocumentProvider `DocumentProvider` in this package does not configure the external-general-entities or external-parameter-entities features, which allows remote attackers to conduct XML external entity (XXE) attacks via unspecified vectors.