CVE-2018-11788

Apache Karaf provides a features deployer, which allows users to "hot deploy" a features XML by dropping the file directly in the deploy folder. The features XML is parsed by XMLInputFactory class. Apache Karaf XMLInputFactory class doesn't contain any mitigation codes against XXE. This is a potential security risk as an user can inject external XML entities in Apache Karaf version prior to 4.1.7 or 4.2.2. It has been fixed in Apache Karaf 4.1.7 and 4.2.2 releases.

• CWE-611

• http://karaf.apache.org/security/cve-2018-11788.txtVendor Advisory
• http://www.securityfocus.com/bid/106479Third Party Advisory, VDB Entry
• http://karaf.apache.org/security/cve-2018-11788.txtVendor Advisory
• http://www.securityfocus.com/bid/106479Third Party Advisory, VDB Entry

Published

Jan 7, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-11782In Apache Subversion versions up to and including 1.9.10, 1.…6.5
• CVE-2018-11783sslheaders plugin extracts information from the client certi…
• CVE-2018-11784When the default servlet in Apache Tomcat versions 9.0.0.M1 …
• CVE-2018-11785Missing authorization check in Apache Impala before 3.0.1 al…
• CVE-2018-11786In Apache Karaf prior to 4.2.0 release, if the sshd service …
• CVE-2018-11787In Apache Karaf version prior to 3.0.9, 4.0.9, 4.1.1, when t…
• CVE-2018-11789When accessing the heron-ui webpage, people can modify the f…
• CVE-2018-1179This vulnerability allows remote attackers to disclose sensi…6.5
• CVE-2018-11790When loading a document with Apache Open Office 4.1.5 and ea…
• CVE-2018-11791Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2018-11792In Apache Impala before 3.0.1, ALTER TABLE/VIEW RENAME requi…
• CVE-2018-11793When parsing a JSON payload with deeply nested JSON structur…