Invoice Security Vulnerabilities
European Union introduced a "standard" in XML format, which comes with a set of security vulnerabilities.
- from
- Billing
- added
- 2026-10-10
- likes
- 0
similar
-
-
Content of EU invoices web.archive.org
The information required on a EU invoice is detailed by Article 226, Section 4 (Content of invoices) of Council Directive 2006/112/EC on the common system of VAT.
-
SAML is insecure by design joonas.fi
Not only weird, SAML is also insecure by design, as it relies on signatures based on XML canonicalization, not XML byte stream. Which means you can exploit XML parser/encoder differences.
-
Council Directive 2006/112/EC eur-lex.europa.eu
European Union reference on the common system of VAT.
-
AS2 datatracker.ietf.org
A protocol for secure and reliable transport of EDI and other business documents over HTTP/S, using S/MIME for signing and encryption.
-
Universal Business Language en.wikipedia.org
Most invoicing software can read and write UBL documents (XML) for data transfer.
Billing › Invoice > Electronic invoices: “European Union introduced a "standard" in XML format, which comes with a set of security vulnerabilities.”