TVC 2024.1.1 Release Information

XXE, short for XML External Entity, represents a critical web security vulnerability. It occurs when an application improperly handles XML data containing external references. Exploiting this vulnerability, attackers can illicitly access sensitive information, execute malicious code on the server, or disrupt system operations.

The TVC product source code has been enhanced to mitigate the XXE vulnerability by implementing crucial checks during XML parsing.The XML parser is now configured to default to disallow external entity references, serving as the primary defense against XXE attacks.