Fallos del tipo CWE-611

698 resultados

Processamento Inseguro de XML Externo (XXE)

Ocorre quando a aplicação processa XML sem desabilitar ou validar entidades externas, permitindo que um atacante injete referências a arquivos locais ou recursos remotos. O parser XML resolve essas entidades e expõe dados sensíveis ou permite ataques de negação de serviço.

Ejemplo

Um serviço web que aceita XML de upload processa um arquivo contendo <!DOCTYPE foo [<!ENTITY xxe SYSTEM "file:///etc/passwd">]>. O parser resolve a entidade e retorna o conteúdo do arquivo no erro ou resposta, ou um atacante injeta billion laughs attack para consumir memória do servidor.

Cómo mitigar

Desabilite explicitamente DTDs e entidades externas no parser XML (em Java, use XMLConstants.ACCESS_EXTERNAL_DTD = ""; em Python, use defusedxml ou desabilite resolve_entities; sempre valide e sanitize entrada XML contra schema predefinido).

CVE-2026-13271HIGHIBM MQ Managed File Transfer is affected by a denial of service vulnerabilityEPSS 0.2%CVE-2026-33737MEDIUMChamilo LMS has an XML External Entity (XXE) InjectionEPSS 0.2%CVE-2023-49234MEDIUMAn XML external entity (XXE) vulnerability was found in Stilog Visual Planning 8. It allows an authenticated attacker to access local serverEPSS 0.2%CVE-2023-25955MEDIUMNational land numerical information data conversion tool all versions improperly restricts XML external entity references (XXE). By processiEPSS 0.2%CVE-2024-12298MEDIUMVulnerability Report on Improper Restriction of XML External Entity Reference in NB-DesignerEPSS 0.2%CVE-2026-44445MEDIUMERPNext: XML External Entity (XEE) Reference Vulnerability in the EDI ModuleEPSS 0.2%CVE-2026-40991MEDIUMXML External Entity (XXE) injection when documenting untrusted XML contentEPSS 0.2%CVE-2026-123314LOWIn JetBrains IntelliJ IDEA before 2026.3, 2026.2.4 xXE attack was possible via an XML response to an HTTP Client requestEPSS 0.2%CVE-2020-14379—A flaw was found in Red Hat AMQ Broker in a way that a XEE attack can be done via Broker's configuration files, leading to denial of serviceEPSS 0.2%CVE-2026-54640HIGHOpenRemote: XXE in KNXProtocol.startAssetImport() allows arbitrary file read via unprotected XMLInputFactoryEPSS 0.2%CVE-2023-26263MEDIUMAll versions of Talend Data Catalog before 8.0-20230110 are potentially vulnerable to XML External Entity (XXE) attacks in the /MIMBWebServiEPSS 0.2%CVE-2024-39586LOWDell AppSync Server, version 4.3 through 4.6, contains an XML External Entity Injection vulnerability. An adjacent high privileged attacker EPSS 0.2%CVE-2026-23739LOWAsterisk xml.c uses unsafe XML_PARSE_NOENT leading to potential XXE InjectionEPSS 0.2%CVE-2024-22380MEDIUMElectronic Delivery Check System (Ministry of Agriculture, Forestry and Fisheries The Agriculture and Rural Development Project Version) MarEPSS 0.2%CVE-2023-37200MEDIUM A CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could cause loss of confidentiality when replaciEPSS 0.2%CVE-2023-29498MEDIUMImproper restriction of XML external entity reference (XXE) vulnerability exists in FRENIC RHC Loader v1.1.0.3 and earlier. If a user opens EPSS 0.2%CVE-2023-26264MEDIUMAll versions of Talend Data Catalog before 8.0-20220907 are potentially vulnerable to XML External Entity (XXE) attacks in the license parsiEPSS 0.2%CVE-2023-22322MEDIUMImproper restriction of XML external entity reference (XXE) vulnerability exists in OMRON CX-Motion Pro 1.4.6.013 and earlier. If a user opeEPSS 0.2%CVE-2025-14543HIGHImproper Restriction of XML External Entity Reference vulnerability in RTI Connext Professional (Core Libraries) allows Serialized Data External Linking.EPSS 0.2%CVE-2026-2253HIGHHitachi Vantara Pentaho Data Integration & Analytics - Improper Restriction of XML External Entity ReferenceEPSS 0.2%