Lucene search
Veracode Vulnerability DatabaseVERACODE:8000HistoryDec 10, 2018 - 9:39 a.m.
XML External Entity (XXE)
2018-12-1009:39:31
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
EPSS
0.001
Percentile
50.1%
bw-webdav is vulnerable to XML external entities attacks (XXE). The parseContent function in webdav/servlet/common/MethodBase.java and the processXML function in webdav/servlet/common/PostRequestPars.java do not implement secure XML parsing which would allow a remote attacker to perform XXE attacks against the application via specially crafted XML file.
Related
prion
prion
Design/Logic Flaw
2018-12-10 02:29:00
osv
osv
Improper Restriction of XML External Entity Reference in bedework:bw-webdav
2018-12-19 19:24:52
CVE-2018-20000
2018-12-10 02:29:00
nvd
nvd
CVE-2018-20000
2018-12-10 02:29:00
cvelist
cvelist
CVE-2018-20000
2018-12-10 02:00:00
github
github
Improper Restriction of XML External Entity Reference in bedework:bw-webdav
2018-12-19 19:24:52
cve
cve
CVE-2018-20000
2018-12-10 02:29:00