CVE

Id
67580  
CVE No.
CVE-2014-0171  
Status
Candidate  
Description
XML external entity (XXE) vulnerability in StaxXMLFactoryProvider2 in Odata4j, as used in Red Hat JBoss Data Virtualization before 6.0.0 patch 4, allows remote attackers to read arbitrary files via a crafted request to a REST endpoint.  
Phase
Assigned (20131203)  
Votes
None (candidate not yet proposed)  
Comments