Falhas do tipo CWE-611

648 resultados

Injeção de Entidade Externa XML (XXE)

Ocorre quando a aplicação parseia XML sem desabilitar o processamento de entidades externas, permitindo que um atacante injete referências a arquivos locais, servidores internos ou execute ataques de negação de serviço. O risco é crítico: vazamento de dados sensíveis, acesso a sistemas internos ou consumo excessivo de recursos.

Exemplo

Uma API que aceita XML em uma requisição POST parse o conteúdo diretamente com a biblioteca padrão. Um atacante envia um payload como `<!DOCTYPE foo [<!ENTITY xxe SYSTEM "file:///etc/passwd">]>` e consegue ler arquivos do servidor.

Como mitigar

Desabilite explicitamente o processamento de entidades externas na configuração do parser XML (ex: `XMLConstants.ACCESS_EXTERNAL_DTD` em Java, `resolve_external_entities = False` em Python). Valide e sanitize entrada XML antes do parse, prefira APIs mais seguras ou formatos como JSON quando possível.

CVE-2024-6961MEDIUMXXE in Guardrails AI when consuming RAIL documentsEPSS 0.4%CVE-2025-54992MEDIUMOpenKilda XXE in SAML configurationEPSS 0.4%CVE-2026-13449HIGHXXE attack in IBM Business Automation Manager Open EditionsEPSS 0.4%CVE-2026-17646HIGHIBM Financial Transaction Manager (FTM) is Impacted by Multiple VulnerabilitiesEPSS 0.4%CVE-2026-12788MEDIUMzhilink 智互联(深圳)科技有限公司 ADP Application Developer Platform 应用开发者平台 XML Parser import xml external entity referenceEPSS 0.4%CVE-2025-63917HIGHPDFPatcher thru 1.1.3.4663 executable's XML bookmark import functionality does not restrict XML external entity (XXE) references. The applicEPSS 0.4%CVE-2026-56701HIGHGrav - XML External Entity Injection via SVG UploadEPSS 0.4%CVE-2023-50168HIGHPega Platform from 6.x to 8.8.4 is affected by an XXE issue with PDF Generation.EPSS 0.4%CVE-2025-44044HIGHKeyoti SearchUnit prior to 9.0.0. is vulnerable to XML External Entity (XXE). An attacker who can force a vulnerable SearchUnit host into paEPSS 0.4%CVE-2023-4218MEDIUMXXE in eclipse.platform / Eclipse IDEEPSS 0.4%CVE-2017-7907—An Improper XML Parser Configuration issue was discovered in Schneider Electric Wonderware Historian Client 2014 R2 SP1 and prior. An impropEPSS 0.4%CVE-2025-53621MEDIUMDSpace vulnerable to XML External Entity (XXE) injection in import via Simple Archive Format (SAF) or import from external sourcesEPSS 0.4%CVE-2024-4690MEDIUMInsecure usage for DocumentBuilderFactory and TransformerFactory in OpenText Application Automation ToolsEPSS 0.4%CVE-2025-31487HIGHThe XWiki JIRA extension allows data leak through an XXE attack by using a fake JIRA serverEPSS 0.4%CVE-2026-13285HIGHIBM MQ Managed File Transfer is vulnerable to XML external entity injectionEPSS 0.4%CVE-2026-20320HIGHA vulnerability in the Open Client Interface (OCI) XML Parser of Cisco BroadWorks could allow an unauthenticated, remote attacker to read seEPSS 0.4%CVE-2026-13287HIGHIBM MQ Managed File Transfer is vulnerable to XML external entity injectionEPSS 0.4%CVE-2025-1225MEDIUMywoa WXCallBack Interface XMLParse.java extract xml external entity referenceEPSS 0.4%CVE-2025-1781HIGHThere is a XXE in W3CSS Validator versions before cssval-20250226 that allows an attacker to use specially-crafted XML objects to coerce serEPSS 0.4%CVE-2023-52239MEDIUMThe XML parser in Magic xpi Integration Platform 4.13.4 allows XXE attacks, e.g., via onItemImport.EPSS 0.4%