Uploaded image for project: 'OFBiz'
  1. OFBiz
  2. OFBIZ-10509

Disable DTDs for XML-RPC requests

    XMLWordPrintableJSON

Details

    • Improvement
    • Status: Closed
    • Major
    • Resolution: Fixed
    • Release Branch 16.11, Release Branch 17.12, 22.01.01
    • 16.11.05, 17.12.01
    • None
    • None

    • Just updated the "Fix Version/s" field

    Description

      Disable all DTDs in XML-RPC by overriding the parsing code and enforcing stricter settings on the XMLReader

      Attachments

        Issue Links

          is part of

          Improvement - An improvement or enhancement to an existing feature or task. OFBIZ-1525 Issue to group security concerns

          • Critical - Crashes, loss of data, severe memory leak.
          • Open

          Activity

            People

              taher Taher Alkhateeb
              taher Taher Alkhateeb
              Votes:
              1 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: