critical9.8
CVE-2014-3244
XML external entity (XXE) vulnerability in the RSSDashlet dashlet in SugarCRM before 6.5.17 allows remote attackers to read arbitrary files or potentially exec…
Impact
XML external entity (XXE) vulnerability in the RSSDashlet dashlet in SugarCRM before 6.5.17 allows remote attackers to read arbitrary files or potentially execute arbitrary code via a crafted DTD in an XML request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sugarcrm | Sugarcrm | before 6.5.16 |
Weakness classification
References
- NVD record
- CVE.org record
- http://seclists.org/fulldisclosure/2014/Jun/92
- http://www.securityfocus.com/bid/68102
- https://web.archive.org/web/20151105182132/http://www.pnigos.com/?p=294
- http://seclists.org/fulldisclosure/2014/Jun/92
- http://www.securityfocus.com/bid/68102
- https://web.archive.org/web/20151105182132/http://www.pnigos.com/?p=294