CVE-2014-3529
1 advisory.
Maven/org.apache.poi:poi CVE-2014-3529: medium
Improper Restriction of XML External Entity Reference in Apache POI
Action: Upgrade org.apache.poi:poi to 3.10.1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.10.1 | - |
Fixed versions
| 3.10.1 |
Sources
- osv: GHSA-q56h-jjj6-52mf
- https://nvd.nist.gov/vuln/detail/CVE-2014-3529
- https://github.com/apache/poi/commit/103b45073c7b504236588b3acc146530205af53c
- https://github.com/apache/poi/commit/236c3c52a9b90688b2e57ec503559409e29f33ed
- https://github.com/apache/poi/commit/6050a68d5adfb4ffef1edb778add09bcee32d1c3
- https://github.com/apache/poi/commit/d72bd78c19dfb7b57395a66ae8d9269d59a87bd2
- https://github.com/apache/poi/commit/eabb6a924be24abb879372d0bc967e0d316b2cf8
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95770
- https://github.com/apache/poi
- https://lucene.apache.org/solr/solrnews.html#18-august-2014-recommendation-to-update-apache-poi-in-apache-solr-480-481-and-490-installations
- http://poi.apache.org/changes.html
- http://rhn.redhat.com/errata/RHSA-2014-1370.html
- http://rhn.redhat.com/errata/RHSA-2014-1398.html
- http://rhn.redhat.com/errata/RHSA-2014-1399.html
- http://rhn.redhat.com/errata/RHSA-2014-1400.html
- http://www-01.ibm.com/support/docview.wss?uid=swg21996759
- http://www.apache.org/dist/poi/release/RELEASE-NOTES.txt
CVE-2014-3529 · published · modified · JSON