Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
XML external entity (XXE) vulnerability in the Apache XML-RPC (aka ws-xmlrpc) library 3.1.3, as used in Apache Archiva, allows remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted DTD.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Apache Archiva Apache XML-RPC库安全漏洞
Vulnerability Description
Apache Archiva是美国阿帕奇（Apache）软件基金会的一套用于管理一个或多个远程存储的软件。该软件提供远程Repository代理、基于角色的安全访问管理和使用情况报告等功能。Apache XML-RPC（又名ws-xmlrpc）是其中的通过HTTP协议进行RPC通信的库。 Apache Archiva中的Apache XML-RPC库3.1.3版本中存在XML外部实体注入漏洞。远程攻击者可借助特制的DTD利用该漏洞实施服务器端请求伪造攻击。
CVSS Information
N/A
Vulnerability Type
N/A