Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2014-0030 Details

The XML-RPC protocol support in Apache Roller before 5.0.3 allows attackers to conduct XML External Entity (XXE) attacks via unspecified vectors.

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:9.8 CRITICALVector:CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://liftsecurity.io/advisories/Apache_Roller_XML-RPC_susceptible_to_XXE/	CVE	Third Party AdvisoryURL Repurposed
https://mail-archives.apache.org/mod_mbox/roller-dev/201401.mbox/%3CCAF1aazCMzDGB12Ls4t-SOwNA=OdguD010LX3yZGhk2GQHafFXw%40mail.gmail.com%3E	CVE
https://www.exploit-db.com/exploits/45341/	CVE	ExploitThird Party AdvisoryVDB Entry
https://liftsecurity.io/advisories/Apache_Roller_XML-RPC_susceptible_to_XXE/	[email protected]	Third Party AdvisoryURL Repurposed
https://mail-archives.apache.org/mod_mbox/roller-dev/201401.mbox/%3CCAF1aazCMzDGB12Ls4t-SOwNA=OdguD010LX3yZGhk2GQHafFXw%40mail.gmail.com%3E	[email protected]
https://www.exploit-db.com/exploits/45341/	[email protected]	ExploitThird Party AdvisoryVDB Entry

CWE-ID	CWE Name	Source
CWE-611	Improper Restriction of XML External Entity Reference	[email protected]

Product	Versions
apache roller	3.1 4.0 4.0.1 5.0 5.0.1
CPE cpe:2.3:a:apache:roller:3.1:::::::* cpe:2.3:a:apache:roller:4.0:::::::* cpe:2.3:a:apache:roller:4.0.1:::::::* cpe:2.3:a:apache:roller:5.0:::::::* cpe:2.3:a:apache:roller:5.0.1:::::::* cpe:2.3:a:apache:roller:5.0.2:::::::* Remediation No remediation found in references.

9 change records found show changes

QUICK INFO