cve/2014/CVE-2014-0096.md

CVE-2014-0096

Description

java/org/apache/catalina/servlets/DefaultServlet.java in the default servlet in Apache Tomcat before 6.0.40, 7.x before 7.0.53, and 8.x before 8.0.4 does not properly restrict XSLT stylesheets, which allows remote attackers to bypass security-manager restrictions and read arbitrary files via a crafted web application that provides an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

POC

Reference

• http://seclists.org/fulldisclosure/2014/Dec/23
• http://seclists.org/fulldisclosure/2014/May/135
• http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html
• http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html
• http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html
• http://www.vmware.com/security/advisories/VMSA-2014-0012.html

Github

No PoCs found on GitHub currently.