readme.md

Title

c3p0 may be exploited by a Billion Laughs Attack when loading XML configuration

URL

https://hackerone.com/reports/509315

Severity score

6.2

Reporter

amassey

Bounty paid

null

---

Title

Pippo XML Entity Expansion (Billion Laughs Attack)

URL

https://hackerone.com/reports/506791

Severity score

8.3

Reporter

amassey

Bounty paid

null

---