Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:27525
HistoryOct 05, 2020 - 2:27 a.m.

XML External Entity (XXE) Injection

2020-10-0502:27:05
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
27
xxe
injection
print-lib/print-servlet
xml
remote attacker
untrusted entity
sdl parser
dtds.

EPSS

0.002

Percentile

61.8%

print-lib/print-servlet is vulnerable to XML External Entity (XXE) injection. A remote attacker is able to inject untrusted XML entity via tryLoadSLD as SDL parser does not disable DTDs.

EPSS

0.002

Percentile

61.8%

Related for VERACODE:27525