CVE-2014-5392 XML External Entity (XXE) vulnerability in JobScheduler before 1.6.4246 and 7.x before 1.7.4241 allows remote attackers to cause a denial of service and read arbitrary files or directories via a reque...
MediumCVSS 5.8
EPSS 2.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
XML External Entity (XXE) vulnerability in JobScheduler before 1.6.4246 and 7.x before 1.7.4241 allows remote attackers to cause a denial of service and read arbitrary files or directories via a request containing an XML external entity declaration in conjunction with an entity reference.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sos jobscheduler | <= 1.6.4131 | No fix listed |
| sos jobscheduler | = 1.6.4014 | No fix listed |
| sos jobscheduler | = 1.6.4043 | No fix listed |
| sos jobscheduler | = 1.7.4177 | No fix listed |
| sos jobscheduler | = 1.7.4189 | No fix listed |