XML External Entitty (XXE)

2021-06-0905:16:36

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

xml external entity

silverstripe/framework

ssrf

system file retrieval

EPSS

0.001

Percentile

41.5%

JSON

silverstripe/framework is vulnerable to XML external entity (XXE) attacks. The loading of external entities and DTDs are not disabled and allows an attacker to perform server-side request forgery (SSRF) attacks or retrieve confidential system files via a malicious XML document.