CVE-2014-3242

Published: May 12, 2014Modified: May 6, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

SOAPpy 0.12.5 allows remote attackers to read arbitrary files via a SOAP request containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

Affected (1)

Products: Makina Corpus: Soappy

Makina Corpus

1 product

Soappy

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Makina Corpus Soappy	Version 0.12.5

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (10)

http://seclists.org/fulldisclosure/2014/May/20

Source: cve@mitre.org

http://www.openwall.com/lists/oss-security/2014/05/06/1

Source: cve@mitre.org

http://www.openwall.com/lists/oss-security/2014/05/06/9

Source: cve@mitre.org

http://www.pnigos.com/?p=260

Source: cve@mitre.org

Exploit

http://www.securityfocus.com/bid/67216

Source: cve@mitre.org

http://seclists.org/fulldisclosure/2014/May/20