Lucene search
Veracode Vulnerability DatabaseVERACODE:6204HistoryApr 27, 2018 - 5:45 a.m.
XML External Entity (XXE)
2018-04-2705:45:53
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
EPSS
0.002
Percentile
54.2%
retrofit is vulnerable to XML external entity (XXE) attacks. The vulnerability exists due to the lack of proper default configuration to disable support for external entities, allowing external files to be read and displayed when processing a malicious XML file.
Related
redhatcve
redhatcve
CVE-2018-1000844
2019-01-07 09:52:02
github
github
XML External Entity (XXE) vulnerability in Square Retrofit
2018-12-21 17:48:26
osv
osv
CVE-2018-1000844
2018-12-20 15:29:02
XML External Entity (XXE) vulnerability in Square Retrofit
2018-12-21 17:48:26
nvd
nvd
CVE-2018-1000844
2018-12-20 15:29:02
prion
prion
Xxe
2018-12-20 15:29:00
cvelist
cvelist
CVE-2018-1000844
2018-12-20 15:00:00
cve
cve
CVE-2018-1000844
2018-12-20 15:29:02