| Package | Affected versions | Patched versions |
|---|---|---|
| org.apache.xmlrpc:xmlrpc | ≤ 3.1.3 | |
| xml-rpc | = 3.1.3 |
XML external entity (XXE) vulnerability in the Apache XML-RPC (aka ws-xmlrpc) library 3.1.3, as used in Apache Archiva, allows remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted DTD.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free