CVE-2016-2340

Name of the Vulnerable Software and Affected Versions Granite Data Services version 3.1.1-SNAPSHOT

Description The issue allows remote authenticated users to read arbitrary files, send TCP requests to intranet servers, or cause a denial of service. This is related to an XML External Entity (XXE) issue, which occurs when an XML external entity declaration is used in conjunction with an entity reference.

Recommendations For Granite Data Services version 3.1.1-SNAPSHOT, consider disabling XML external entity processing as a temporary workaround until a patch is available. Restrict access to sensitive files and intranet servers to minimize the risk of exploitation.