Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

XMLConverUtil.convertToMap（）方法存在漏洞 #159

Closed
LinSheng0719 opened this issue Jul 4, 2018 · 6 comments
Closed

XMLConverUtil.convertToMap（）方法存在漏洞 #159

LinSheng0719 opened this issue Jul 4, 2018 · 6 comments

Comments

@LinSheng0719
Copy link

微信支付SDK XXE漏洞
https://blog.csdn.net/u013224189/article/details/80902339
官方WxPayAPI_JAVA_v3 发现了该漏洞，发现这边也存在
@EarnestLee
Copy link

我也收到这通知了，麻烦作者修复下哦

@chenmins
Copy link

chenmins commented Jul 4, 2018

彼此彼此，刚接到通知

@chenmins
Copy link

chenmins commented Jul 4, 2018

https://blog.csdn.net/aitangyong/article/details/51907064 参考这个

@liyiorg
Copy link
Owner

liyiorg commented Jul 4, 2018

周六前 会发布一个更新版本

@EarnestLee
Copy link

发版具体时间是啥时候呢，商户平台打电话说我们有潜在风险，需要尽快修复。

liyiorg pushed a commit that referenced this issue Jul 6, 2018
#158 #159 XML 解析 XXE漏洞处理
71c58bf
@liyiorg
Copy link
Owner

liyiorg commented Jul 6, 2018

@EarnestLee 今天发版 明天可从maven 中央仓库提取

@liyiorg liyiorg closed this as completed Jul 9, 2018
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
4 participants
@chenmins @liyiorg @EarnestLee @LinSheng0719