CVE

Id
68921  
CVE No.
CVE-2014-1626  
Status
Candidate  
Description
XML External Entity (XXE) vulnerability in MARC::File::XML module before 1.0.2 for Perl, as used in Evergreen, Koha, perl4lib, and possibly other products, allows context-dependent attackers to read arbitrary files via a crafted XML file.  
Phase
Assigned (20140121)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
663126 68921 CVE-2014-1626 MLIST:[Koha] 20140122 SECURITY release: MARC::File::XML 1.0.2  View
663127 68921 CVE-2014-1626 URL:http://lists.katipo.co.nz/pipermail/koha/2014-January/038430.html  View
663128 68921 CVE-2014-1626 MLIST:[OPEN-ILS-GENERAL] 20140121 SECURITY release: MARC::File::XML 1.0.2  View
663129 68921 CVE-2014-1626 URL:http://libmail.georgialibraries.org/pipermail/open-ils-general/2014-January/009442.html  View
663130 68921 CVE-2014-1626 CONFIRM:http://www.nntp.perl.org/group/perl.perl4lib/2014/01/msg3073.html  View
663131 68921 CVE-2014-1626 CONFIRM:https://metacpan.org/source/GMCHARLT/MARC-XML-1.0.2/Changes  View
663132 68921 CVE-2014-1626 BID:65057  View
663133 68921 CVE-2014-1626 URL:http://www.securityfocus.com/bid/65057  View
663134 68921 CVE-2014-1626 OSVDB:102367  View
663135 68921 CVE-2014-1626 URL:http://osvdb.org/102367  View
663136 68921 CVE-2014-1626 SECUNIA:55404  View
663137 68921 CVE-2014-1626 URL:http://secunia.com/advisories/55404  View
663138 68921 CVE-2014-1626 XF:marcfile-xml-info-disc(90620)  View

Related JVN