Castor Project Castor vulnerabilities

1 known vulnerability affecting castor_project/castor.

Total CVEs

1

CISA KEV

0

Public exploits

1

Exploited in wild

0

Severity breakdown

MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2014-3004MEDIUMCVSS 4.3PoC≤ 1.3.2v1.3+1 more2014-06-11

CVE-2014-3004 [MEDIUM] CWE-611 CVE-2014-3004: The default configuration for the Xerces SAX Parser in Castor before 1.3.3 allows context-dependent The default configuration for the Xerces SAX Parser in Castor before 1.3.3 allows context-dependent attackers to conduct XML External Entity (XXE) attacks via a crafted XML document.