CVE-2014-7839: External entities expanded by DocumentProvider

November 25, 2014 (updated April 22, 2015)

DocumentProvider in this package does not configure the external-general-entities or external-parameter-entities features, which allows remote attackers to conduct XML external entity (XXE) attacks via unspecified vectors.

References

bugzilla.redhat.com/CVE-2014-7839

Detect and mitigate CVE-2014-7839 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →