Skip to content
OpenAdvisories
High DLA-1517-1 1 CVE

dom4j - security update

Published Sep 24, 2018 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 8 dom4j 1.6.1+dfsg.3-2+deb8u1

Vulnerabilities 1

  • High 7.5
    CVE-2018-1000632

    Dom4j contains a XML Injection vulnerability

    dom4j version prior to version 2.1.1 contains a CWE-91: XML Injection vulnerability in Class: Element. Methods: addElement, addAttribute that can result in an attacker tampering with XML documents through XML injection. This attack appear to be exploitable vi…

    dom4j:dom4j dom4j dom4j org.dom4j:dom4j Debian Ubuntu Maven