QiAnXinCodeSafe opened this issue 5 years ago · 0 comments
When parsing the xml string in the Cilent.java , there is no prohibition of parsing the xml external entity. The attacker may construct a malicious return data to perform the xml external entity injection attack.