CVE-2014-3629 XML external entity (XXE) vulnerability in the XML Exchange module in Apache Qpid 0.30 allows remote attackers to cause outgoing HTTP connections via a crafted message.
MediumCVSS 4.3
EPSS 6.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
XML external entity (XXE) vulnerability in the XML Exchange module in Apache Qpid 0.30 allows remote attackers to cause outgoing HTTP connections via a crafted message.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apache qpid | = 0.30 | No fix listed |
References
- packetstormsecurity.com
- 62235 third-party-advisory
- 20141107 CVE-2014-3629: Apache Qpid's qpidd can be induced to make http requests mailing-list
- 71004 vdb-entry
- apache-qpid-cve20143629-info-disc(98575) vdb-entry