logo

Database

Lack of data validation In org.apache.tomcat:tomcat

Description

Improper Input Validation in Apache Tomcat java/org/apache/catalina/servlets/DefaultServlet.java in the default servlet in Apache Tomcat before 6.0.40, 7.x before 7.0.53, and 8.x before 8.0.4 does not properly restrict XSLT stylesheets, which allows remote attackers to bypass security-manager restrictions and read arbitrary files via a crafted web application that provides an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Component
Affected version
Patched versions

Aliases

1. CVE-2014-00962. NVD-2014-00963. OSV-2014-00964. GCVE-2014-0096

References

1. https://github.com/apache/tomcat/commit/3c53c4da7bcf300f519eaed5ad1751d24dd59f6b2. https://github.com/apache/tomcat/commit/5c545da226b3c71ed9603c38ad2de88057778c1b3. https://github.com/apache/tomcat/commit/913d94b289e056107e521dbab8e79cc72a62a3314. https://github.com/apache/tomcat/commit/970c23bfd24dfa1dcb86ed917e6c8b47dcfb44335. https://github.com/apache/tomcat80/commit/65ed69d96a101dfa99eea2cfe17e9e87b310084c6. https://github.com/apache/tomcat80/commit/f3f2979df693a9c84c6742fcb162f3671b0a50d37. https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b@%3Cdev.tomcat.apache.org%3E8. https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apache.org%3E9. https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c@%3Cdev.tomcat.apache.org%3E10. https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3E11. https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb@%3Cdev.tomcat.apache.org%3E12. https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3E13. https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95@%3Cdev.tomcat.apache.org%3E14. https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomcat.apache.org%3E15. https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b@%3Cdev.tomcat.apache.org%3E16. https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3E17. https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113@%3Cdev.tomcat.apache.org%3E18. https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3E19. https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c0485101320. http://advisories.mageia.org/MGASA-2014-0268.html21. http://linux.oracle.com/errata/ELSA-2014-0865.html22. http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150282.html23. http://marc.info/?l=bugtraq&m=141017844705317&w=224. http://marc.info/?l=bugtraq&m=144498216801440&w=225. http://rhn.redhat.com/errata/RHSA-2015-0675.html26. http://rhn.redhat.com/errata/RHSA-2015-0720.html27. http://rhn.redhat.com/errata/RHSA-2015-0765.html28. http://seclists.org/fulldisclosure/2014/Dec/2329. http://seclists.org/fulldisclosure/2014/May/13530. http://svn.apache.org/viewvc?view=revision&revision=157861031. http://svn.apache.org/viewvc?view=revision&revision=157861132. http://svn.apache.org/viewvc?view=revision&revision=157863733. http://svn.apache.org/viewvc?view=revision&revision=157865534. http://svn.apache.org/viewvc?view=revision&revision=158585335. http://tomcat.apache.org/security-6.html36. http://tomcat.apache.org/security-7.html37. http://tomcat.apache.org/security-8.html38. http://www-01.ibm.com/support/docview.wss?uid=swg2167823139. http://www-01.ibm.com/support/docview.wss?uid=swg2168152840. http://www.debian.org/security/2016/dsa-353041. http://www.debian.org/security/2016/dsa-355242. http://www.mandriva.com/security/advisories?name=MDVSA-2015:05243. http://www.mandriva.com/security/advisories?name=MDVSA-2015:05344. http://www.mandriva.com/security/advisories?name=MDVSA-2015:08445. http://www.novell.com/support/kb/doc.php?id=701016646. http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html47. http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html48. http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html49. http://www.securityfocus.com/archive/1/534161/100/0/threaded50. http://www.securityfocus.com/bid/6766751. http://www.securitytracker.com/id/103030152. http://www.vmware.com/security/advisories/VMSA-2014-0012.html

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.