[KARAF-5911] Restrict XML entity on provided XMLFactoryInput

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 4.2.1
• Fix Version/s: 4.2.2, 4.1.7
• Component/s: karaf
• Assignee: Jean-Baptiste Onofré
• Reporter: Jean-Baptiste Onofré
• Created: 13/Sep/18 06:43
• Updated: 06/Jan/19 05:34
• Resolved: 20/Sep/18 14:14

Issue Links

• links to: CVE-2018-11788
• links to: GitHub Pull Request #611