CVE-2014-2056 — XML External Entity (XXE) Injection in Server

3 documents3 sources
Severity
7.5HIGHNVD
EPSS
0.5%
top 32.46%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Owncloud Server
Timeline
PublishedJun 4
Latest updateMay 17

Description

PHPDocX, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, allows remote attackers to read arbitrary files, cause a denial of service, or possibly have other impact via an XML External Entity (XXE) attack.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-j325-pfjc-96gm: PHPDocX, as used in ownCloud Server before 5↗2022-05-17
▶
CVEList
CVE-2014-2056: PHPDocX, as used in ownCloud Server before 5↗2014-06-04
▶
CVE-2014-2056 — XML External Entity (XXE) Injection | cvebase