CVE-2014-125087

Published

Last updated

NVD

https://nvd.nist.gov/vuln/detail/CVE-2014-125087

CGA ID

CGA-mxc2-46wh-46q5

Severity

Unknown

Summary

java-xmlbuilder vulnerable to XML External Entity Reference

Description

A vulnerability was found in java-xmlbuilder up to 1.1. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation leads to xml external entity reference. Upgrading to version 1.2 is able to address this issue. The name of the patch is e6fddca201790abab4f2c274341c0bb8835c3e73. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-221480.

References

https://images.chainguard.dev/security/CGA-mxc2-46wh-46q5
https://github.com/advisories/GHSA-3vrc-rrpw-r5pw
https://nvd.nist.gov/vuln/detail/CVE-2014-125087
https://github.com/jmurty/java-xmlbuilder/issues/6
https://github.com/jmurty/java-xmlbuilder/commit/e6fddca201790abab4f2c274341c0bb8835c3e73
https://github.com/jmurty/java-xmlbuilder
https://github.com/jmurty/java-xmlbuilder/releases/tag/v1.2
https://security.netapp.com/advisory/ntap-20240208-0009
https://vuldb.com/?ctiid.221480
https://vuldb.com/?id.221480

Affected packages

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

CVE-2014-125087

Severity

Summary

Description

References

Affected packages

Products

Why Chainguard

Customers

Company

Resources