Uploaded image for project: 'RESTEasy'
  1. RESTEasy
  2. RESTEASY-647

RestEasy and XXE injection - Services that accept XML are vulnerable to XXE attacks, Part II

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done
    • Icon: Critical Critical
    • 2.3.2.Final
    • 2.3.1
    • jaxrs
    • None
    • Medium

      For description, see RESTEASY-637. I fixed the problem for org.w3c.dom.Document inputs, but not for JAXB XML inputs.

        1. resteasy-jaxb-provider-2.3.1.GA.jar
          63 kB
        2. resteasy-jaxb-provider-2.3.1.GA-sources.jar
          39 kB
        3. resteasy-jaxb-provider-2.3.1.GA-testsources.jar
          57 kB
        4. resteasy-jaxb-provider-2.3.2.Final.jar
          64 kB
        5. resteasy-jaxb-provider-2.3.2.Final-sources.jar
          39 kB

              rsigal@redhat.com Ronald Sigal
              adkathuria_jira anuj kathuria (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              6 Start watching this issue

                Created:
                Updated:
                Resolved: