Tag

xxe-vulnerability

Safeguard articles tagged "xxe-vulnerability" — guides, analysis, and best practices for software supply chain and application security.

1 article

Vulnerability Analysis

CVE-2018-1285: XXE in Apache log4net

CVE-2018-1285: Apache log4net before 2.0.10 fails to disable external XML entities, enabling XXE attacks via config files. Impact, fix, and detection.

Sep 16, 20258 min read