writeups.xyz / XML Security in Java

Submitter : c2a

Date: 17 January 2023

Bounty : undisclosed

Vulnerabilities :

• XXE
• Billion Laugh Attack
• DoS

Programs :

• Undisclosed

Authors :

• Pieter De Cremer (@0xDC0DE)
• Vasilii Ermilov (@Ermil0v)

Link :
https://semgrep.dev/blog/2022/xml-security-in-java