You are viewing a plain text version of this content. The canonical link for it is here.

Posted to java-dev@axis.apache.org by Vignesh Ragavan <vi...@gmail.com> on 2024/03/08 08:50:56 UTC

Xml external entity issue

Hi,

The xmlstreamreaderwrapper in the axis kernel library that I'm using
displays a XXE issue. How to resolve that ?

Attached file for your reference.

Thanks,
Vignesh

Re: Xml external entity issue

Posted by robertlazarski <ro...@gmail.com>.

Best I can tell you are using a very old version of Axis2 and Axiom but
anyways that looks like noise from an automated scanning tool because an
XXE is DTD related and web services standards like SOAP prohibit DTD's.

That Axiom code hasn't changed in about a decade so it doesn't seem to be a
real issue.

On Thu, Mar 7, 2024 at 10:51 PM Vignesh Ragavan <vi...@gmail.com>
wrote:

> Hi,
>
> The xmlstreamreaderwrapper in the axis kernel library that I'm using
> displays a XXE issue. How to resolve that ?
>
> Attached file for your reference.
>
> Thanks,
> Vignesh
>