CVE-2014-0030 - The XML-RPC protocol support in Apache Roller before 5.0.3 allows attackers to conduct XML External Entity (XXE) attacks via unspecified vectors

CRITICAL

The XML-RPC protocol support in Apache Roller before 5.0.3 allows attackers to conduct XML External Entity (XXE) attacks via unspecified vectors

Published Oct 9, 2017

9.8

CRITICAL

CVSS 3.0

EPSS 16.87%

The XML-RPC protocol support in Apache Roller before 5.0.3 allows attackers to conduct XML External Entity (XXE) attacks via unspecified vectors.

No remediation recorded yet.

Weaknesses (1)

CWE-611

XXE

Link	Providers	Tags
https://liftsecurity.io/advisories/Apache_Roller_XML-RPC_susceptible_to_XXE/		x_refsource_CONFIRMThird Party AdvisoryURL Repurposed
https://mail-archives.apache.org/mod_mbox/roller-dev/201401.mbox/%3CCAF1aazCMzDGB12Ls4t-SOwNA=OdguD010LX3yZGhk2GQHafFXw%40mail.gmail.com%3E		mailing-listx_refsource_MLIST
https://www.exploit-db.com/exploits/45341/		exploitx_refsource_EXPLOIT-DBThird Party AdvisoryVDB Entry

No recorded changes yet.

Sources

Status PUBLISHED

Assigner redhat

Published Oct 9, 2017

Updated Aug 6, 2024

Reserved Dec 3, 2013

Updated n/a

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a