Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:34704
HistoryMar 16, 2022 - 3:37 a.m.

XML External Entities (XXE)

2022-03-1603:37:24
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
19
xml external entities
xxe attacks
input validation
arbitrary file content
software

EPSS

0.001

Percentile

25.9%

cvrf2csaf is vulnerable to XML External Entity (XXE) attacks. The vulnerability exists due to improper input validation in the _validate_input_against_schema function in the _validate_input_against_schema file This allows to view arbitrary file content

EPSS

0.001

Percentile

25.9%

Related for VERACODE:34704