Skip to content

[Java]: Add XXE sinks #426

@haby0

Description

@haby0

Query

Link to pull request with your CodeQL query:

Relevant PR: github/codeql#6564

CVE ID(s)

List the CVE ID(s) associated with this vulnerability. GitHub will automatically link CVE IDs to the GitHub Advisory Database.

Report

Describe the vulnerability. Provide any information you think will help GitHub assess the impact your query has on the open source community.

  • Are you planning to discuss this vulnerability submission publicly? (Blog Post, social networks, etc). We would love to have you spread the word about the good work you are doing

Yes, I am planning to write a blog post about the query.

Result(s)

Provide at least one useful result found by your query, on some revision of a real project.

https://lgtm.com/query/2106748007040688970/

Metadata

Metadata

Labels

All For OneSubmissions to the All for One, One for All bounty

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions