Improper Input Validation in Apache Santuario XML Security

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2014-8152 · ADVISORY
• apache/santuario-java commit 55857fd · WEB
• exchange.xforce.ibmcloud.com/vulnerabilities/99993 · WEB
• apache/santuario-java · PACKAGE
• lists.apache.org/thread.html/680e6938b6412e26d5446054fd31de2011d33af11786b989127d1cc3@%3Ccommits.santuario.apache.org%3E · WEB
• lists.apache.org/thread.html/r1c07a561426ec5579073046ad7f4207cdcef452bb3100abaf908e0cd@%3Ccommits.santuario.apache.org%3E · WEB
• svn.apache.org/viewvc · WEB
• santuario.apache.org/secadv.data/CVE-2014-8152.txt.asc · WEB
• seclists.org/oss-sec/2015/q1/181 · WEB
• securityfocus.com/bid/72115
• securitytracker.com/id/1031556

org.apache.santuario:xmlsec のその他の脆弱性

• CVE-2023-44483中 6.5All versions of Apache Santuario - XML Security for Java prior to 2.2.6, 2.3.4, and 3.0.3, when using the JSR 105 API, are vulnerable to an …
• CVE-2021-40690高 7.5All versions of Apache Santuario - XML Security for Java prior to 2.2.3 and 2.1.7 are vulnerable to an issue where the "secureValidation" pr…
• CVE-2019-12400中 5.5In version 2.0.3 Apache Santuario XML Security for Java, a caching mechanism was introduced to speed up creating new XML documents using a s…
• CVE-2013-4517中 4.3Apache Santuario XML Security for Java before 1.5.6, when applying Transforms, allows remote attackers to cause a denial of service (memory …
• CVE-2013-5823中 5.0Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and ear…