Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-94155
HistoryNov 02, 2021 - 12:00 a.m.

Easy-XML XML External Entity Injection Vulnerability

2021-11-0200:00:00
China National Vulnerability Database
www.cnvd.org.cn
10
easy-xml
xml documents
vulnerability
external entity injection
sensitive information
unauthorized attacker

EPSS

0.002

Percentile

60.9%

Easy-Xml is used to provide a simplified view of Xml documents.Easy-XML is vulnerable to XML external entity injection, which stems from errors such as configuration during the operation of a network system or product, and can be exploited by an unauthorized attacker to obtain sensitive information about the affected components.

EPSS

0.002

Percentile

60.9%