Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:38860
HistoryJan 13, 2023 - 1:55 a.m.

XML External Entity (XXE) Injection

2023-01-1301:55:12
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12
xml external entity injection
xmlrpc
responseparser vulnerability
malicious xml documents

EPSS

0.003

Percentile

69.3%

aXMLRPC is vulnerable to XML external entity attacks. The vulnerability exists because the library does not properly validate the XML documents submitted by the users via the parse function of ResponseParser.java, allowing an attacker to inject malicious XML documents to perform requests on behalf of the server.

EPSS

0.003

Percentile

69.3%