https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-28T07:49:32.275237+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2018-1000632 CVE-2018-1000632 2026-09-28T07:49:32.299302+00:00

dom4j version prior to version 2.1.1 contains a CWE-91: XML Injection vulnerability in Class: Element. Methods: addElement, addAttribute that can result in an attacker tampering with XML documents through XML injection. This attack appear to be exploitable via an attacker specifying attributes or elements in the XML document. This vulnerability appears to have been fixed in 2.1.1 or later.

 https://vulnerability.circl.lu/vuln/usn-4619-1 USN-4619-1 — dom4j vulnerability 2026-09-28T07:49:32.299415+00:00

Affected: Ubuntu:16.04:LTS: dom4j

Mário Areias discovered that dom4j did not properly validate XML document elements. An attacker could exploit this with a crafted XML file to cause dom4j to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2018-1000632)