Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Jboss EAP XML Injection (aka Blind XPath Injection) Vulnerability - CVE-2018-1000632 - Vulnerability Database
Jboss EAP

Jboss EAP XML Injection (aka Blind XPath Injection) Vulnerability - CVE-2018-1000632

High
Reference: CVE-2018-1000632
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2018-1000632
Title: Jboss EAP XML Injection (aka Blind XPath Injection) Vulnerability
Overview:

dom4j version prior to version 2.1.1 contains a CWE-91: XML Injection vulnerability in Class: Element. Methods: addElement addAttribute that can result in an attacker tampering with XML documents through XML injection. This attack appear to be exploitable via an attacker specifying attributes or elements in the XML document. This vulnerability appears to have been fixed in 2.1.1 or later.