Fallos del tipo CWE-611

697 resultados

Processamento Inseguro de XML Externo (XXE)

Ocorre quando a aplicação processa XML sem desabilitar ou validar entidades externas, permitindo que um atacante injete referências a arquivos locais ou recursos remotos. O parser XML resolve essas entidades e expõe dados sensíveis ou permite ataques de negação de serviço.

Ejemplo

Um serviço web que aceita XML de upload processa um arquivo contendo <!DOCTYPE foo [<!ENTITY xxe SYSTEM "file:///etc/passwd">]>. O parser resolve a entidade e retorna o conteúdo do arquivo no erro ou resposta, ou um atacante injeta billion laughs attack para consumir memória do servidor.

Cómo mitigar

Desabilite explicitamente DTDs e entidades externas no parser XML (em Java, use XMLConstants.ACCESS_EXTERNAL_DTD = ""; em Python, use defusedxml ou desabilite resolve_entities; sempre valide e sanitize entrada XML contra schema predefinido).

CVE-2018-25082MEDIUMzwczou WeChat SDK Python to_xml xml external entity referenceEPSS 0.8%CVE-2023-42445MEDIUMPossible local file exfiltration by XML External entity injectionEPSS 0.8%CVE-2021-4295MEDIUMONC code-validator-api XML CodeValidatorApiConfiguration.java vocabularyValidationConfigurations xml external entity referenceEPSS 0.8%CVE-2024-23525MEDIUMThe Spreadsheet::ParseXLSX package before 0.30 for Perl allows XXE attacks because it neglects to use the no_xxe option of XML::Twig.EPSS 0.8%CVE-2024-25129LOWLimited data exfiltration in CodeQL CLIEPSS 0.8%CVE-2023-20918—In getPendingIntentLaunchFlags of ActivityOptions.java, there is a possible elevation of privilege due to a confused deputy with no additionEPSS 0.8%CVE-2023-28680HIGHJenkins Crap4J Plugin 0.9 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.EPSS 0.8%CVE-2023-20173MEDIUMCisco Identity Services Engine XML External Entity Injection VulnerabilitiesEPSS 0.8%CVE-2022-0198MEDIUMImproper Restriction of XML External Entity Reference in stanfordnlp/corenlpEPSS 0.8%CVE-2024-47873HIGHPhpSpreadsheet XmlScanner bypass leads to XXEEPSS 0.8%CVE-2023-35389MEDIUMMicrosoft Dynamics 365 On-Premises Remote Code Execution VulnerabilityEPSS 0.8%CVE-2025-12531HIGHIBM InfoSphere Information Server is affected by an XML external entity injection (XXE) vulnerabilityEPSS 0.8%CVE-2023-48362CRITICALApache Drill: XXE Vulnerability in XML Format ReaderEPSS 0.8%CVE-2023-20030MEDIUMCisco Identity Services Engine XML External Entity Injection VulnerabilityEPSS 0.8%CVE-2023-28150MEDIUMAn issue was discovered in Independentsoft JODF before 1.1.110. The API is prone to XML external entity (XXE) injection via a remote DTD in EPSS 0.7%CVE-2023-27480HIGHData leak through a XAR import XXE attack in xwiki-platform-xar-modelEPSS 0.7%CVE-2023-28152MEDIUMAn issue was discovered in Independentsoft JWord before 1.1.110. The API is prone to XML external entity (XXE) injection via a remote DTD inEPSS 0.7%CVE-2025-49544MEDIUMColdFusion | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)EPSS 0.7%CVE-2020-26064MEDIUMA vulnerability in the web UI of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to gain read and write access tEPSS 0.7%CVE-2021-34706MEDIUMCisco Identity Services Engine XML External Entity Injection VulnerabilityEPSS 0.7%