Skip to content
OpenAdvisories
High USN-4619-1 1 CVE

dom4j vulnerability

Published Nov 5, 2020 · Updated Apr 27, 2026

Ecosystem: Ubuntu

Summary

Mário Areias discovered that dom4j did not properly validate XML document
elements. An attacker could exploit this with a crafted XML file to cause
dom4j to crash, resulting in a denial of service, or possibly execute
arbitrary code. (CVE-2018-1000632)

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 16.04 LTS 16.04:LTS dom4j 1.6.1+dfsg.3-2ubuntu1.2

Vulnerabilities 1

  • High 7.5
    CVE-2018-1000632

    Dom4j contains a XML Injection vulnerability

    dom4j version prior to version 2.1.1 contains a CWE-91: XML Injection vulnerability in Class: Element. Methods: addElement, addAttribute that can result in an attacker tampering with XML documents through XML injection. This attack appear to be exploitable vi…

    dom4j:dom4j dom4j dom4j org.dom4j:dom4j Debian Ubuntu Maven

References

  • report
    https://ubuntu.com/security/CVE-2018-1000632