Headline
CVE-2021-23926: [XMLBEANS-517] Use safe XML parsers
The XML parsers used by XMLBeans up to version 2.6.0 did not set the properties needed to protect the user from malicious XML input. Vulnerabilities include possibilities for XML Entity Expansion attacks. Affects XMLBeans up to and including v2.6.0.
Log inSkip to main contentSkip to sidebar
Dashboards
Projects
Issues
Help
- Jira Core help
- Keyboard Shortcuts
- About Jira
- Jira Credits
Log In
- XMLBeans
- XMLBEANS-517
Log In
Export
XMLWordPrintableJSON
Details
**Type: **
Improvement
Status: Resolved
**Priority: **
MajorResolution: Fixed
Affects Version/s: None
Fix Version/s: Version 3.0.0
Component/s: DOM
Labels:
None
Description
Use XML parsers that enable security controls.
https://www.owasp.org/index.php/XML_External_Entity_(XXE)_Prevention_Cheat_Sheet
Attachments
Issue Links
is cloned by
XMLBEANS-518 Support new XmlOptions to control XML parser settings
- Resolved
Activity
People
Assignee:
PJ Fanning
Reporter:
PJ Fanning
Votes:
0 Vote for this issue
Watchers:
2 Start watching this issue
Dates
Created:
10/Jun/18 11:58
Updated:
18/Aug/18 14:45
Resolved:
10/Jun/18 11:59