Approved changes feed: RSS · Atom

cpe:2.3:a:castor_project:castor:1.3.1:*:*:*:*:*:*:*

part: a version: 1.3.1 update: *

VendorCastor Project (b316c1ff-74be-56ad-bc99-7f6779acfb41)
ProductCastor (73d09e5a-d6be-5ed7-8da9-09a1cc621df1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/castor purl2cpe 2026-06-01 10:15:40.714163
pkg:deb/ubuntu/castor purl2cpe 2026-06-01 10:15:40.714164
pkg:github/castor-data-binding/castor purl2cpe 2026-06-01 10:15:40.714166
pkg:rpm/opensuse/castor purl2cpe 2026-06-01 10:15:40.714167

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-3004 vulnerable 2026-06-08 05:05:30.610521 Details available
The default configuration for the Xerces SAX Parser in Castor before 1.3.3 allows context-dependent attackers to conduct XML External Entity (XXE) attacks via a crafted XML document.
Published: 2014-06-11T14:00:00.000Z
Updated: 2024-08-06T10:28:46.353Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.