Uploaded image for project: 'OFBiz'
  1. OFBiz
  2. OFBIZ-10509

Disable DTDs for XML-RPC requests

Attach filesAttach ScreenshotVotersWatch issueWatchersCreate sub-taskLinkCloneUpdate Comment AuthorReplace String in CommentUpdate Comment VisibilityDelete Comments
    XMLWordPrintableJSON

Details

    • Improvement
    • Status: Closed
    • Major
    • Resolution: Fixed
    • Release Branch 16.11, Release Branch 17.12, 22.01.01
    • 16.11.05, 17.12.01
    • None
    • None

    • Just updated the "Fix Version/s" field

    Description

      Disable all DTDs in XML-RPC by overriding the parsing code and enforcing stricter settings on the XMLReader

      Attachments

        Issue Links

        is part of

        Improvement - An improvement or enhancement to an existing feature or task. OFBIZ-1525 Issue to group security concerns

        • Critical - Crashes, loss of data, severe memory leak.
        • Open

        Activity
          This comment will be Viewable by All Users Viewable by All Users
          Cancel

          People

            taher Taher Alkhateeb
            taher Taher Alkhateeb
            Votes:
            1 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Slack

                Issue deployment