XML external entity (XXE) vulnerability in the Java XML processing functionality in Play before 2.2.6 and 2.3.x before 2.3.5 might allow remote attackers to read arbitrary files, cause a denial of service, or have unspecified other impact via crafted XML data.
Published at: December 29, 2017 at 10:29PM
View on website
New vulnerability on the NVD: CVE-2014-3630
Tag: government hack NVD security
No comments: