Lucene search
Veracode Vulnerability DatabaseVERACODE:31048HistoryJun 24, 2021 - 2:55 a.m.
XML External Entity (XXE)
2021-06-2402:55:14
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
0.001 Low
EPSS
Percentile
48.9%
service-api is vulnerable to XML External Entity (XXE). The vulnerability exists due to an insecure configuration in the XML parser. An attacker is able to import a malicious crafted file which imports external Document Type Definition (DTD) files which will extract secrets from the system.
| CPE | Name | Operator | Version |
|---|---|---|---|
| service-api | le | 5.3.5 |
Related
osv
osv
XXE vulnerability on Launch import with externally-defined DTD file
2021-06-28 16:38:29
CVE-2021-29620
2021-06-23 18:15:09
cvelist
cvelist
cve
cve
CVE-2021-29620
2021-06-23 18:15:09
prion
prion
Xxe
2021-06-23 18:15:00
nvd
nvd
CVE-2021-29620
2021-06-23 18:15:09
github
github
XXE vulnerability on Launch import with externally-defined DTD file
2021-06-28 16:38:29