CVE-2014-3244: XEE
XML external entity (XXE) vulnerability in the RSSDashlet dashlet in SugarCRM before 6.5.17 allows remote attackers to read arbitrary files or potentially execute arbitrary code via a crafted DTD in an XML request.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-3244?
The severity of CVE-2014-3244 is critical with a score of 9.8.
How does the XML external entity (XXE) vulnerability in SugarCRM before 6.5.17 work?
The vulnerability allows remote attackers to read arbitrary files or potentially execute arbitrary code via a crafted DTD in an XML request.
Which version of SugarCRM is affected by CVE-2014-3244?
SugarCRM before version 6.5.17 is affected by CVE-2014-3244.
How can I fix the XML external entity (XXE) vulnerability in SugarCRM?
To fix the vulnerability, you need to upgrade SugarCRM to version 6.5.17 or later.
Where can I find more information about CVE-2014-3244?
You can find more information about CVE-2014-3244 at the following references: [1](http://seclists.org/fulldisclosure/2014/Jun/92), [2](http://www.securityfocus.com/bid/68102), [3](https://web.archive.org/web/20151105182132/http://www.pnigos.com/?p=294).