[AXIS-2924] CVE-2018-8032 XSS vulnerability

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Assignee: Unassigned
• Reporter: Robert Lazarski
• Created: 08/Jul/18 14:35
• Updated: 29/Sep/19 21:48
• Resolved: 08/Jul/18 14:35

Description

I built the trunk and can confirm the fix. See below:

r1831943 | veithen | 2018-05-20 14:10:32 -0600 (Sun, 20 May 2018) | 1 line

Correctly escape namespace URIs in namespace declarations.

Trunk link with maven builds:

https://travis-ci.org/apache/axis1-java