Apache XML-RPC Library 3.1.3 XXE Vulnerability: Server-Side Request Forgery (SSRF) via Crafted DTD

CVE-2016-5002 · HIGH Severity

AV:N/AC:M/AU:N/C:C/I:C/A:C

XML external entity (XXE) vulnerability in the Apache XML-RPC (aka ws-xmlrpc) library 3.1.3, as used in Apache Archiva, allows remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted DTD.

Learn more about our Cis Benchmark Audit For Apache Http Server.