Fallos del tipo CWE-611

646 resultados

Processamento Inseguro de XML Externo (XXE)

Ocorre quando a aplicação processa XML sem desabilitar ou validar entidades externas, permitindo que um atacante injete referências a arquivos locais ou recursos remotos. O parser XML resolve essas entidades e expõe dados sensíveis ou permite ataques de negação de serviço.

Ejemplo

Um serviço web que aceita XML de upload processa um arquivo contendo <!DOCTYPE foo [<!ENTITY xxe SYSTEM "file:///etc/passwd">]>. O parser resolve a entidade e retorna o conteúdo do arquivo no erro ou resposta, ou um atacante injeta billion laughs attack para consumir memória do servidor.

Cómo mitigar

Desabilite explicitamente DTDs e entidades externas no parser XML (em Java, use XMLConstants.ACCESS_EXTERNAL_DTD = ""; em Python, use defusedxml ou desabilite resolve_entities; sempre valide e sanitize entrada XML contra schema predefinido).

CVE-2021-1483MEDIUMCisco SD-WAN vManage Software XML External Entity VulnerabilityEPSS 0.9%CVE-2019-17637—In all versions of Eclipse Web Tools Platform through release 3.18 (2020-06), XML and DTD files referring to external entities could be explEPSS 0.9%CVE-2022-2131HIGHOpenKM XXE InjectionEPSS 0.9%CVE-2023-50380MEDIUMApache Ambari: authenticated users could perform XXE to read arbitrary files on the serverEPSS 0.9%CVE-2023-27554MEDIUMIBM WebSphere Application Server XML external entity injectionEPSS 0.9%CVE-2022-41241CRITICALJenkins RQM Plugin 2.8 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.EPSS 0.9%CVE-2022-35168—Due to improper input sanitization of XML input in SAP Business One - version 10.0, an attacker can perform a denial-of-service attack rendeEPSS 0.8%CVE-2024-27266HIGHIBM Maximo Application Suite XML external entity injectionEPSS 0.8%CVE-2020-36641MEDIUMgturri aXMLRPC ResponseParser.java ResponseParser xml external entity referenceEPSS 0.8%CVE-2022-47873CRITICALNetcad KEOS 1.0 is vulnerable to XML External Entity (XXE) resulting in SSRF with XXE (remote).EPSS 0.8%CVE-2023-26043MEDIUMXML External Entity (XXE) injection in GeoServer style upload functionalityEPSS 0.8%CVE-2022-23031—On BIG-IP FPS, ASM, and Advanced WAF versions 16.1.x before 16.1.1, 15.1.x before 15.1.4, and 14.1.x before 14.1.4.4, an XML External EntityEPSS 0.8%CVE-2023-49110HIGHXML External Entity Injection in Kiuwan SASTEPSS 0.8%CVE-2015-10029MEDIUMkelvinmo simplexrd simplexrd.class.php xml external entity referenceEPSS 0.8%CVE-2025-4949MEDIUMXXE vulnerability in Eclipse JGitEPSS 0.8%CVE-2022-1331MEDIUMDelta Electronics DMARS Improper Restriction of XML External Entity ReferenceEPSS 0.8%CVE-2023-38693CRITICALRCE in Lucee REST endpointEPSS 0.8%CVE-2024-21082CRITICALVulnerability in the Oracle BI Publisher product of Oracle Analytics (component: XML Services). Supported versions that are affected are 7.EPSS 0.8%CVE-2024-55081CRITICALAn XML External Entity (XXE) injection vulnerability in the component /datagrip/upload of Chat2DB v0.3.5 allows attackers to execute arbitraEPSS 0.8%CVE-2022-22977HIGHVMware Tools for Windows(12.0.0, 11.x.y and 10.x.y) contains an XML External Entity (XXE) vulnerability. A malicious actor with non-administEPSS 0.8%