Apache XML-RPC XXE Vulnerability

Description

References

• nvd.nist.gov/vuln/detail/CVE-2016-5002 · ADVISORY
• access.redhat.com/errata/RHSA-2018:3768 · WEB
• exchange.xforce.ibmcloud.com/vulnerabilities/115042 · WEB
• security.gentoo.org/glsa/202401-26 · WEB
• web.archive.org/web/20210123151805/http://www.securityfocus.com/bid/91736 · WEB
• web.archive.org/web/20211021044107/http://www.securitytracker.com/id/1036294 · WEB
• web.archive.org/web/20230520164025/https://0ang3el.blogspot.com/2016/07/beware-of-ws-xmlrpc-library-in-your.html · WEB
• openwall.com/lists/oss-security/2016/07/12/5 · WEB
• securityfocus.com/bid/91736 · WEB
• securitytracker.com/id/1036294 · WEB
• 0ang3el.blogspot.in/2016/07/beware-of-ws-xmlrpc-library-in-your.html

org.apache.xmlrpc:xmlrpc 的其他漏洞

• CVE-2019-17570严重 9.8An untrusted deserialization was found in the org.apache.xmlrpc.parser.XmlRpcResponseParser:addResult method of Apache XML-RPC (aka ws-xmlrp…
• CVE-2016-5003严重 9.8The Apache XML-RPC (aka ws-xmlrpc) library 3.1.3, as used in Apache Archiva, allows remote attackers to execute arbitrary code via a crafted…