CVE

Id
69348  
CVE No.
CVE-2014-2053  
Status
Candidate  
Description
getID3() before 1.9.8, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, allows remote attackers to read arbitrary files, cause a denial of service, or possibly have other impact via an XML External Entity (XXE) attack.  
Phase
Assigned (20140219)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
665353 69348 CVE-2014-2053 CONFIRM:http://getid3.sourceforge.net/source/changelog.txt  View
665354 69348 CVE-2014-2053 CONFIRM:http://owncloud.org/about/security/advisories/oC-SA-2014-006/  View
665355 69348 CVE-2014-2053 CONFIRM:https://wordpress.org/news/2014/08/wordpress-3-9-2/  View
665356 69348 CVE-2014-2053 DEBIAN:DSA-3001  View
665357 69348 CVE-2014-2053 URL:http://www.debian.org/security/2014/dsa-3001  View
665358 69348 CVE-2014-2053 SECUNIA:58002  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
16047 JVNDB-2014-004922 CloudBees Jenkins の PasswordParameterDefinition の入力制御におけるパスワードを取得される脆弱性 CloudBees Jenkins の PasswordParameterDefinition の入力制御には、デフォルト値に関する処理に不備があるため、パスワードを取得される脆弱性が存在します。 CVE-2014-2061 69348 5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-004922.html  View