XML external entity (XXE) vulnerability in StaxXMLFactoryProvider2 in Odata4j, as used in Red Hat JBoss Data Virtualization before 6.0.0 patch 4, allows remote attackers to read arbitrary files via a crafted request to a REST endpoint.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Jboss_data_virtualization | Redhat | * | 6.0.0 (including) |
| Red Hat JBoss Data Virtualization 6.0 | RedHat | odata4j | * |