NVD

Id
34615  
Name
CVE-2014-7177  
Description
XML External Entity vulnerability in Enalean Tuleap 7.2 and earlier allows remote authenticated users to read arbitrary files via a crafted xml document in a create action to plugins/tracker/.  
Reject
 
CVSS Version
2  
CVSS Score
4  
Severity
Medium  
CVSS Base Score
4  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2014-10-31  
Modified Date
2015-12-01  
Seq
2014-7177  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
178310 34615 CVE-2014-7177 20141028 CVE-2014-7177 - External XML Entity Injection in Enalean Tuleap  View
178311 34615 CVE-2014-7177 70771  View
178312 34615 CVE-2014-7177 tuleap-cve20147177-info-disc(98308)  View
178313 34615 CVE-2014-7177 https://tuleap.net/plugins/git/tuleap/tuleap/stable?p=tuleap%2Fstable.git&a=blob&h=aed26cbae81410a981c4615bd7da1518f31c50d0&hb=29cbe3557a07c74f3d910648b8c5307e8faef65a&f=ChangeLog  View
178314 34615 CVE-2014-7177 https://tuleap.net/plugins/tracker/?aid=7458  View
178315 34615 CVE-2014-7177 https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-7177/  View
178316 34615 CVE-2014-7177 https://www.tuleap.org/recent-vulnerabilities  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
16296 JVNDB-2014-005171 Enalean Tuleap における XML 外部エンティティの脆弱性 Enalean Tuleap には、XML 外部エンティティの脆弱性が存在します。 CVE-2014-7177 74469 CVE-2014-7177 34615 4 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-005171.html 2014-10-07 2014-12-09 View