XML External Entity (XXE)

2018-09-2707:28:32

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

EPSS

0.004

Percentile

72.5%

JSON

javamelody-core is vulnerable to XML external entity attacks. This is due to enabled support for external entities and DTD in parseSoapMethodName function in bull/javamelody/PayloadNameRequestWrapper.java which allows for a remote attacker to perform such attacks.