XPath Injection in Dom4j Project
CVE-2018-1000632
dom4j version prior to version 2.1.1 contains a CWE-91: XML Injection vulnerability in Class: Element. Methods: addElement, addAttribute that can result in an attacker tampering with XML documents through XML injection. This attack appear to be exploitable via an attacker specifying attributes or elements in the XML document. This vulnerability appears to have been fixed in 2.1.1 or later.
EPSS: 0.066 (93.5th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N.
Affected products
- Dom4j_project Dom4j
- Netapp Oncommand_workflow_automation
- Netapp Snapcenter
- Netapp Snap_creator_framework
- Netapp Snapmanager
- Oracle Flexcube_investor_servicing — versions 12.0.4, 12.1.0, 12.3.0
- Oracle Primavera_p6_enterprise_project_portfolio_management
- Oracle Rapid_planning — versions 12.1, 12.2
- Oracle Retail_integration_bus — versions 15.0, 16.0
- Oracle Utilities_framework — versions 2.2.0, 4.2.0.2.0, 4.2.0.3.0
Weakness classification (CWE)
Public proof-of-concept exploits
References
- cve@mitre.org (mailing-list, x_refsource_MLIST, Mailing List, Third Party Advisory)
- cve@mitre.org (x_refsource_REDHAT, vendor-advisory, Third Party Advisory)
- cve@mitre.org (x_refsource_REDHAT, vendor-advisory, Third Party Advisory)
- cve@mitre.org (x_refsource_REDHAT, vendor-advisory, Third Party Advisory)
- cve@mitre.org (x_refsource_REDHAT, vendor-advisory, Third Party Advisory)
- cve@mitre.org (mailing-list, x_refsource_MLIST)
- cve@mitre.org (x_refsource_REDHAT, vendor-advisory, Third Party Advisory)
- cve@mitre.org (x_refsource_REDHAT, vendor-advisory, Third Party Advisory)
- cve@mitre.org (x_refsource_REDHAT, vendor-advisory, Third Party Advisory)
- cve@mitre.org (x_refsource_REDHAT, vendor-advisory, Third Party Advisory)
Frequently asked questions
- What is CVE-2018-1000632?
- CVE-2018-1000632 is a high-severity vulnerability in Dom4j Project, classified under XML Injection (Blind XPath Injection). CVSS score: 7.5/10. Published 2018-08-20.
- How severe is CVE-2018-1000632?
- High severity. CVSS v3 base score is 7.5 out of 10.
- Is CVE-2018-1000632 known to be exploited?
- 8 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.