CVE-2014-7839

Name of the Vulnerable Software and Affected Versions RESTEasy versions 2.3.7 through 3.0.9

Description The issue allows remote attackers to conduct XML external entity (XXE) attacks. This is due to the DocumentProvider in RESTEasy not configuring the external-general-entities or external-parameter-entities features.

Recommendations For versions 2.3.7 through 3.0.9, consider disabling the DocumentProvider until a patch is available to prevent XXE attacks. Restrict access to sensitive data and external entities to minimize the risk of exploitation.