XML External Entity (XXE) Injection

onos-drivers-utilities is vulnerable to XML external entitiy XXE injection attacks. The application does not disable document type declarations DTD, allowing a malicious user can inject external entities through the loadxml function in XmlConfigParser.java...