Fallos del tipo CWE-91

89 resultados

Injeção XML

Ocorre quando dados não validados de um usuário ou entrada externa são incorporados diretamente em um documento XML processado pela aplicação. Um atacante pode injetar tags, entidades ou estruturas XML malformadas para alterar a semântica do documento, contornar validações, executar XXE (XML External Entity), ou manipular lógica de negócio que depende do parsing XML.

Ejemplo

Um sistema de e-commerce que constrói um pedido em XML concatenando strings do usuário: `<pedido><cliente>` + nome_do_usuario + `</cliente></pedido>`. Se o nome for `</cliente><desconto>90%</desconto><cliente>`, a estrutura XML é corrompida e o pedido passa a ter um desconto não autorizado.

Cómo mitigar

Valide e escape rigorosamente toda entrada antes de inseri-la em XML usando bibliotecas de serialização segura (não concatenação de strings). Use schemas XML (XSD) para validar a estrutura esperada e desabilite processamento de entidades externas (XXE) no parser configurando as propriedades de segurança adequadas.

CVE-2024-11622HIGHAn XML external entity injection (XXE) vulnerability in HPE Insight Remote Support may allow remote users to disclose information in certainEPSS 1.5%CVE-2024-25413CRITICALA XSLT Server Side injection vulnerability in the Import Jobs function of FireBear Improved Import And Export v3.8.6 allows attackers to exeEPSS 1.5%CVE-2021-4140CRITICALIt was possible to construct specific XSLT markup that would be able to bypass an iframe sandbox. This vulnerability affects Firefox ESR < 9EPSS 1.3%CVE-2024-51136CRITICALAn XML External Entity (XXE) vulnerability in Dmoz2CSV in openimaj v1.3.10 allows attackers to access sensitive information or execute arbitEPSS 1.2%CVE-2023-32173MEDIUMUnified Automation UaGateway AddServer XML Injection Denial-of-Service VulnerabilityEPSS 1.2%CVE-2024-28109HIGHPotential XSLT injection vulnerability when using policy filesEPSS 1.0%CVE-2023-38207HIGHAdobe Commerce XML Injection (aka Blind XPath Injection) Arbitrary file system readEPSS 0.9%CVE-2023-22247HIGHAdobe Commerce XML Injection Arbitrary file system readEPSS 0.9%CVE-2023-29289MEDIUMAdobe Commerce XML Injection Security feature bypassEPSS 0.9%CVE-2021-27777HIGHHCL Unica Platform is vulnerable to XML External Entity (XXE) injectionEPSS 0.8%CVE-2022-2458—XML external entity injection(XXE) is a vulnerability that allows an attacker to interfere with an application's processing of XML data. ThiEPSS 0.8%CVE-2022-35259HIGHXML Injection with Endpoint Manager 2022. 3 and below causing a download of a malicious file to run and possibly execute to gain unauthorizeEPSS 0.8%CVE-2022-32755MEDIUMIBM Security Directory Server external entity injectionEPSS 0.7%CVE-2022-4245MEDIUMCodehaus-plexus: xml external entity (xxe) injectionEPSS 0.7%CVE-2021-22524MEDIUMDenial of service vulnerability in NetIQ Access Manager versions prior to version 4.5.4 and 5.0.1EPSS 0.7%CVE-2022-27233MEDIUMXML injection in the Quartus(R) Prime Programmer included in the Intel(R) Quartus Prime Pro and Standard edition software may allow an unautEPSS 0.6%CVE-2024-47113HIGHIBM ICP - Voice Gateway XML injectionEPSS 0.6%CVE-2025-66034MEDIUMfontTools is Vulnerable to Arbitrary File Write and XML injection in fontTools.varLibEPSS 0.5%CVE-2022-22244MEDIUMJunos OS: Unauthenticated XPath Injection vulnerability in J-WebEPSS 0.5%CVE-2024-42374HIGHXML injection in SAP BEx Web Java Runtime Export Web ServiceEPSS 0.5%