CVE-2014-1626: XML External Entity (XXE) vulnerability in MARC::File::XML module before 1.0.2 for Perl, as used in Evergre...

Security readout for executives and security teams

This flaw can let an attacker-controlled MARC XML file make a vulnerable Perl library read local files from the server. The business impact depends on whether an affected application accepts MARC XML from users, partners, or automated feeds. Exposure is most likely in library-management or metadata-processing systems that parse MARC XML using MARC::File::XML before 1.0.2, especially Koha, Evergreen, perl4lib, or custom Perl workflows. Prioritize remediation where MARC XML import is internet-facing, partner-facing, or handles sensitive systems. For internal-only batch processing, handle through normal patch management after confirming exposure. Mitigation focus: Upgrade MARC::File::XML to version 1.0.2 or later where applicable.; Apply relevant Koha, Evergreen, or perl4lib security guidance for this dependency.; Restrict MARC XML imports to trusted sources until patched..

Prepared

Jun 14, 2026, 14:50 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.