Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:20860
HistoryJul 19, 2019 - 2:32 a.m.

XML External Entity (XXE)

2019-07-1902:32:58
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6

0.097 Low

EPSS

Percentile

94.8%

ladon is vulnerable to XML external entity. Attackers who can send SOAP messages to the Ladon webservice via the HTTP interface can exploit the ulnerability to read local files, forge server side requests or crash the application.

CPENameOperatorVersion
ladonle0.9.38
ladonle1.0.5

0.097 Low

EPSS

Percentile

94.8%