Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:26654
HistorySep 07, 2020 - 10:52 a.m.

Denial Of Service (DoS)

2020-09-0710:52:06
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
github.com/antchfx/xmlquery
vulnerability
denial of service
url response validation
application crash
software

EPSS

0.005

Percentile

75.3%

github.com/antchfx/xmlquery is vulnerable to denial of service (DoS) attacks. The vulnerability exists because the LoadURL function in node.go fails to properly validate the type/format of incoming responses from URL before parsing and proceeding to the next process, allowing an attacker to pass URL with malicious string to cause an application crash.

EPSS

0.005

Percentile

75.3%