CVE-2018-1000632
PoC —CVSS 3.1
7.5 high
EPSS
7%p93
Published
()
Modified
Description
dom4j version prior to version 2.1.1 contains a CWE-91: XML Injection vulnerability in Class: Element. Methods: addElement, addAttribute that can result in an attacker tampering with XML documents through XML injection. This attack appear to be exploitable via an attacker specifying attributes or elements in the XML document. This vulnerability appears to have been fixed in 2.1.1 or later.
- Vendors
- dom4j projectdebianoracleredhatnetapp
- Products
- dom4j, debian linux, flexcube investor servicing, primavera p6 enterprise project portfolio management, rapid planning, retail integration bus, utilities framework, satellite, satellite capsule, jboss enterprise application platform, oncommand workflow automation, snap creator framework
- Weakness
- CWE-91
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
In the news0 stories
No ingested article mentions this CVE yet.