Weaknesses of type CWE-611

648 results

Processamento inseguro de XML externo (XXE)

Ocorre quando uma aplicação processa XML sem desabilitar a resolução de entidades externas, permitindo que um atacante injete referências a arquivos locais ou recursos remotos. O parser XML carrega esses recursos e expõe seu conteúdo ou causa negação de serviço, comprometendo confidencialidade e disponibilidade.

Example

Um endpoint de API aceita XML do usuário e o processa com um parser padrão. Um atacante envia um payload XXE que referencia `/etc/passwd` via entity declaration, e o parser retorna o conteúdo do arquivo na resposta ou em logs. Alternativa: bomb XML que incha exponencialmente, travando o servidor.

How to mitigate

Desabilite explicitamente entidades externas e DTDs no parser XML (ex: `XMLConstants.FEATURE_SECURE_PROCESSING` em Java; `LIBXML_DISABLE_ENTITY_LOADER` em PHP). Valide e sanitize entrada XML; prefira JSON quando possível. Teste com payloads XXE conhecidos.

CVE-2022-1700HIGHImproper Restriction of XML External Entity Reference ('XXE') vulnerability in the Policy Engine of Forcepoint Data Loss Prevention (DLP), wEPSS 0.8%CVE-2023-28151MEDIUMAn issue was discovered in Independentsoft JSpreadsheet before 1.1.110. The API is prone to XML external entity (XXE) injection via a remoteEPSS 0.8%CVE-2021-27604HIGHIn order to prevent XML External Entity vulnerability in SAP NetWeaver ABAP Server and ABAP Platform (Process Integration - Enterprise ServiEPSS 0.8%CVE-2023-51601MEDIUMHoneywell Saia PG5 Controls Suite XML External Entity Processing Information Disclosure VulnerabilityEPSS 0.8%CVE-2023-51600MEDIUMHoneywell Saia PG5 Controls Suite XML External Entity Processing Information Disclosure VulnerabilityEPSS 0.8%CVE-2023-51605MEDIUMHoneywell Saia PG5 Controls Suite XML External Entity Processing Information Disclosure VulnerabilityEPSS 0.8%CVE-2024-56324LOWGoCD vulnerable to XXE injection via abuse of pipeline XML "snippet" editing by group adminsEPSS 0.8%CVE-2023-51602MEDIUMHoneywell Saia PG5 Controls Suite XML External Entity Processing Information Disclosure VulnerabilityEPSS 0.8%CVE-2023-51604MEDIUMHoneywell Saia PG5 Controls Suite XML External Entity Processing Information Disclosure VulnerabilityEPSS 0.8%CVE-2018-25082MEDIUMzwczou WeChat SDK Python to_xml xml external entity referenceEPSS 0.8%CVE-2024-23525MEDIUMThe Spreadsheet::ParseXLSX package before 0.30 for Perl allows XXE attacks because it neglects to use the no_xxe option of XML::Twig.EPSS 0.8%CVE-2024-25129LOWLimited data exfiltration in CodeQL CLIEPSS 0.8%CVE-2023-20918—In getPendingIntentLaunchFlags of ActivityOptions.java, there is a possible elevation of privilege due to a confused deputy with no additionEPSS 0.8%CVE-2020-36640MEDIUMbonitasoft bonita-connector-webservice SecureWSConnector.java TransformerConfigurationException xml external entity referenceEPSS 0.8%CVE-2023-28680HIGHJenkins Crap4J Plugin 0.9 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.EPSS 0.8%CVE-2023-20173MEDIUMCisco Identity Services Engine XML External Entity Injection VulnerabilitiesEPSS 0.8%CVE-2022-43430HIGHJenkins Compuware Topaz for Total Test Plugin 2.4.8 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacEPSS 0.8%CVE-2023-48362CRITICALApache Drill: XXE Vulnerability in XML Format ReaderEPSS 0.8%CVE-2023-35389MEDIUMMicrosoft Dynamics 365 On-Premises Remote Code Execution VulnerabilityEPSS 0.8%CVE-2017-20151MEDIUMiText RUPS XfaFile.java xml external entity referenceEPSS 0.8%