Fallos del tipo CWE-611

697 resultados

Processamento Inseguro de XML Externo (XXE)

Ocorre quando a aplicação processa XML sem desabilitar ou validar entidades externas, permitindo que um atacante injete referências a arquivos locais ou recursos remotos. O parser XML resolve essas entidades e expõe dados sensíveis ou permite ataques de negação de serviço.

Ejemplo

Um serviço web que aceita XML de upload processa um arquivo contendo <!DOCTYPE foo [<!ENTITY xxe SYSTEM "file:///etc/passwd">]>. O parser resolve a entidade e retorna o conteúdo do arquivo no erro ou resposta, ou um atacante injeta billion laughs attack para consumir memória do servidor.

Cómo mitigar

Desabilite explicitamente DTDs e entidades externas no parser XML (em Java, use XMLConstants.ACCESS_EXTERNAL_DTD = ""; em Python, use defusedxml ou desabilite resolve_entities; sempre valide e sanitize entrada XML contra schema predefinido).

CVE-2023-24189CRITICALAn XML External Entity (XXE) vulnerability in urule v2.1.7 allows attackers to execute arbitrary code via uploading a crafted XML file to /uEPSS 1.2%CVE-2020-26247LOWXXE in NokogiriEPSS 1.2%CVE-2023-34411HIGHThe xml-rs crate before 0.8.14 for Rust and Crab allows a denial of service (panic) via an invalid <! token (such as <!DOCTYPEs/%<!A nestingEPSS 1.2%CVE-2022-45395CRITICALJenkins CCCC Plugin 0.6 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.EPSS 1.1%CVE-2022-40747CRITICAL"IBM InfoSphere Information Server 11.7 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote atEPSS 1.1%CVE-2023-27876HIGHIBM TRIRIGA Application Platform XML external entity injectionEPSS 1.1%CVE-2022-32458HIGHData Systems Consulting Co., Ltd. BPM - XML External Entity (XXE) InjectionEPSS 1.1%CVE-2021-1530MEDIUMCisco BroadWorks Messaging Server XML External Entity Injection VulnerabilityEPSS 1.1%CVE-2021-21266MEDIUMXXE vulnerability in OpenHABEPSS 1.1%CVE-2024-52800LOWPotential XXE (XML External Entity Injection) vulnerability in veraPDF CLIEPSS 1.1%CVE-2023-51591MEDIUMVoltronic Power ViewPower Pro doDocument XML External Entity Processing Information Disclosure VulnerabilityEPSS 1.1%CVE-2021-44477HIGHGE Gas Power ToolBoxST Improper Restriction of XML External Entity ReferenceEPSS 1.1%CVE-2022-21205HIGHImproper restriction of XML external entity reference in DSP Builder Pro for Intel(R) Quartus(R) Prime Pro Edition before version 21.3 may aEPSS 1.1%CVE-2020-6590—Forcepoint Web Security Content Gateway versions prior to 8.5.4 improperly process XML input, leading to information disclosure.EPSS 1.1%CVE-2022-43415HIGHJenkins REPO Plugin 1.15.0 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.EPSS 1.1%CVE-2019-12711MEDIUMCisco Unified Communications Manager XML External Expansion VulnerabilityEPSS 1.1%CVE-2021-3055MEDIUMPAN-OS: XML External Entity (XXE) Reference Vulnerability in the PAN-OS Web InterfaceEPSS 1.1%CVE-2020-7035HIGHXXE in Avaya Aura Orchestration DesignerEPSS 1.1%CVE-2020-7037HIGHAvaya Equinox Conferencing XXE vulnerabilityEPSS 1.1%CVE-2023-26999CRITICALAn issue found in NetScout nGeniusOne v.6.3.4 allows a remote attacker to execute arbitrary code and cause a denial of service via a craftedEPSS 1.1%