Description (CNA)
jersey: XXE via parameter entities not disabled by the jersey SAX parser
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| jersey / jersey | affected through 2014-09-17 |
CWE
No CWE identifiers supplied.
References
- https://access.redhat.com/security/cve/cve-2014-3643
- https://www.oracle.com/security-alerts/cpujul2022.html
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-3643
ADP enrichment
No English description supplied.