CVE-2014-3579

https://notcve.org/view.php?id=CVE-2014-3579

XML external entity (XXE) vulnerability in Apache ActiveMQ Apollo 1.x before 1.7.1 allows remote consumers to have unspecified impact via vectors involving an XPath based selector when dequeuing XML messages. Vulnerabilidad de XEE (XML External Entity) en Apache ActiveMQ Apollo, en versiones 1.x anteriores a la 1.7.1, permite que consumidores remotos provoquen un impacto sin especificar mediante vectores relacionados con un selector basado en XPath al eliminar de la cola los mensajes XML. • http://activemq.apache.org/security-advisories.data/CVE-2014-3579-announcement.txt http://seclists.org/oss-sec/2015/q1/428 http://www.securityfocus.com/bid/72508 https://exchange.xforce.ibmcloud.com/vulnerabilities/100721 https://issues.apache.org/jira/browse/APLO-366 https://lists.apache.org/thread.html/a859563f05fbe7c31916b3178c2697165bd9bbf5a65d1cf62aef27d2%40%3Ccommits.activemq.apache.org%3E • CWE-611: Improper Restriction of XML External Entity Reference •