CVE-2014-3629

CVE-2014-3629 is an XML external entity (XXE) vulnerability in the XML Exchange module of Apache Qpid 0.30. This flaw allows remote attackers to initiate outgoing HTTP connections through a specially crafted message. With a CVSS score of 4.3, it is a medium-severity vulnerability, requiring moderate attack complexity and primarily impacting confidentiality by potentially disclosing local files or network information. There is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit or Nuclei, and it has received limited community and media attention.