Safeguard
Tag

dom4j-xxe

Safeguard articles tagged "dom4j-xxe" — guides, analysis, and best practices for software supply chain and application security.

1 article

Vulnerability Analysis

dom4j XML external entity vulnerability (CVE-2018-1000632)

CVE-2018-1000632, the dom4j XXE vulnerability, let attackers inject and tamper with XML via unescaped addElement/addAttribute calls. Here's the fix.

Dec 24, 20258 min read
dom4j-xxe — Safeguard Blog