Safeguard
Tag

xml-injection

Safeguard articles tagged "xml-injection" — guides, analysis, and best practices for software supply chain and application security.

1 article

Vulnerability Analysis

dom4j XML external entity vulnerability (CVE-2018-1000632)

CVE-2018-1000632, the dom4j XXE vulnerability, let attackers inject and tamper with XML via unescaped addElement/addAttribute calls. Here's the fix.

Dec 24, 20258 min read
xml-injection — Safeguard Blog