Denial Of Service (DoS)

REXML is vulnerable to Denial Of Service (DoS). The vulnerability is due to improper handling of deeply nested XML elements with the same local name attribute when using the REXML library's tree parser API. An attacker can exploit this by send a specially crafted XML document and that causes the application to consume excessive resources and…Read More