.. / CVE-2018-8033

• XXE
• Nuclei
• Web

Exploit for Apache OFBiz 16.11.04 - XML Entity Injection (CVE-2018-8033)

Description:

Apache OFBiz 16.11.04 is susceptible to XML external entity injection (XXE injection).

Nuclei Template

View the template here CVE-2018-8033.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2018/CVE-2018-8033.yaml

References: