Vulnerability in Apache Qpid
CVE-2014-3629
XML external entity (XXE) vulnerability in the XML Exchange module in Apache Qpid 0.30 allows remote attackers to cause outgoing HTTP connections via a crafted message.
EPSS: 0.069 (93.4th percentile) — read the EPSS interpretation.
Affected products
- Apache Qpid — versions 0.30
- N/a — versions n/a
Weakness classification (CWE)
References
- secalert@redhat.com (vdb-entry, x_refsource_XF)
- secalert@redhat.com (mailing-list, x_refsource_BUGTRAQ)
- secalert@redhat.com (vdb-entry, x_refsource_BID)
- secalert@redhat.com (x_refsource_MISC)
- secalert@redhat.com (x_refsource_SECUNIA, third-party-advisory)