Common Weakness Enumeration
CWE-611
AllowedImproper Restriction of XML External Entity Reference
Abstraction: Base · Status: Draft
The product processes an XML document that can contain XML entities with URIs that resolve to documents outside of the intended sphere of control, causing the product to embed incorrect documents into its output.
1694 vulnerabilities reference this CWE, most recent first.
GHSA-F48V-9GWP-8F79
Vulnerability from github – Published: 2022-05-24 16:50 – Updated: 2024-04-04 01:17
VLAI
Details
NSA Ghidra before 9.0.1 allows XXE when a project is opened or restored, or a tool is imported, as demonstrated by a project.prp file.
Severity
9.1 (Critical)
{
"affected": [],
"aliases": [
"CVE-2019-13625"
],
"database_specific": {
"cwe_ids": [
"CWE-611"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2019-07-17T03:15:00Z",
"severity": "CRITICAL"
},
"details": "NSA Ghidra before 9.0.1 allows XXE when a project is opened or restored, or a tool is imported, as demonstrated by a project.prp file.",
"id": "GHSA-f48v-9gwp-8f79",
"modified": "2024-04-04T01:17:31Z",
"published": "2022-05-24T16:50:32Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-13625"
},
{
"type": "WEB",
"url": "https://github.com/NationalSecurityAgency/ghidra/issues/71"
},
{
"type": "WEB",
"url": "https://xlab.tencent.com/en/2019/03/18/ghidra-from-xxe-to-rce"
},
{
"type": "WEB",
"url": "http://blog.fxiao.me/ghidra"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
"type": "CVSS_V3"
}
]
}
GHSA-F4FJ-Q6M4-CC52
Vulnerability from github – Published: 2024-06-07 21:10 – Updated: 2024-06-07 21:10
VLAI
Summary
ZendFramework vulnerable to XXE/XEE attacks
Details
Numerous components utilizing PHP's DOMDocument, SimpleXML, and xml_parse functionality are vulnerable to two types of attacks:
- XML eXternal Entity (XXE) Injection attacks. The above mentioned extensions are insecure by default, allowing external entities to be specified by adding a specific DOCTYPE element to XML documents and strings. By exploiting this vulnerability an application may be coerced to open arbitrary files and/or TCP connections.
- XML Entity Expansion (XEE) vectors, leading to Denial of Service vectors. XEE attacks occur when the XML DOCTYPE declaration includes XML entity definitions that contain either recursive or circular references; this leads to CPU and memory consumption, making Denial of Service exploits trivial to implement.
Severity
9.8 (Critical)
{
"affected": [
{
"package": {
"ecosystem": "Packagist",
"name": "zendframework/zend-xmlrpc"
},
"ranges": [
{
"events": [
{
"introduced": "2.1.0"
},
{
"fixed": "2.1.6"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "Packagist",
"name": "zendframework/zend-xmlrpc"
},
"ranges": [
{
"events": [
{
"introduced": "2.2.0"
},
{
"fixed": "2.2.6"
}
],
"type": "ECOSYSTEM"
}
]
}
],
"aliases": [],
"database_specific": {
"cwe_ids": [
"CWE-611",
"CWE-776"
],
"github_reviewed": true,
"github_reviewed_at": "2024-06-07T21:10:24Z",
"nvd_published_at": null,
"severity": "CRITICAL"
},
"details": "Numerous components utilizing PHP\u0027s DOMDocument, SimpleXML, and xml_parse functionality are vulnerable to two types of attacks:\n\n- XML eXternal Entity (XXE) Injection attacks. The above mentioned extensions are insecure by default, allowing external entities to be specified by adding a specific DOCTYPE element to XML documents and strings. By exploiting this vulnerability an application may be coerced to open arbitrary files and/or TCP connections.\n- XML Entity Expansion (XEE) vectors, leading to Denial of Service vectors. XEE attacks occur when the XML DOCTYPE declaration includes XML entity definitions that contain either recursive or circular references; this leads to CPU and memory consumption, making Denial of Service exploits trivial to implement.",
"id": "GHSA-f4fj-q6m4-cc52",
"modified": "2024-06-07T21:10:25Z",
"published": "2024-06-07T21:10:24Z",
"references": [
{
"type": "WEB",
"url": "https://github.com/zendframework/zend-xmlrpc/commit/0ee07bc62e32ddde2680a48fe13fd58c28a208aa"
},
{
"type": "WEB",
"url": "https://github.com/zendframework/zend-xmlrpc/commit/204ccbee883487e4873bce89278c48e370c21a63"
},
{
"type": "WEB",
"url": "https://github.com/zendframework/zend-xmlrpc/commit/27201f2c48acb3ab6135e8772211d9cb707693d6"
},
{
"type": "WEB",
"url": "https://github.com/zendframework/zend-xmlrpc/commit/48f20929f93df4a79254c85155aaebbbe330dc93"
},
{
"type": "WEB",
"url": "https://github.com/zendframework/zend-xmlrpc/commit/7a42486b63797a37af5c26be1bd3d4fb235a5939"
},
{
"type": "WEB",
"url": "https://github.com/zendframework/zend-xmlrpc/commit/93376258630eab4823cd5009a7230e17073feed8"
},
{
"type": "WEB",
"url": "https://framework.zend.com/security/advisory/ZF2014-01"
},
{
"type": "WEB",
"url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/zendframework/zend-xmlrpc/ZF2014-01.yaml"
},
{
"type": "PACKAGE",
"url": "https://github.com/zendframework/zend-xmlrpc"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
}
],
"summary": "ZendFramework vulnerable to XXE/XEE attacks"
}
GHSA-F4MJ-GV96-W8V9
Vulnerability from github – Published: 2022-05-14 01:14 – Updated: 2022-05-14 01:14
VLAI
Details
ManageEngine ServiceDesk Plus before 9312 contains an XML injection at add Configuration items CMDB API.
Severity
8.8 (High)
{
"affected": [],
"aliases": [
"CVE-2017-9362"
],
"database_specific": {
"cwe_ids": [
"CWE-611"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2019-03-25T16:29:00Z",
"severity": "HIGH"
},
"details": "ManageEngine ServiceDesk Plus before 9312 contains an XML injection at add Configuration items CMDB API.",
"id": "GHSA-f4mj-gv96-w8v9",
"modified": "2022-05-14T01:14:10Z",
"published": "2022-05-14T01:14:10Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-9362"
},
{
"type": "WEB",
"url": "https://labs.integrity.pt/advisories/cve-2017-9362"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
}
]
}
GHSA-F58C-GQ56-VJJF
Vulnerability from github – Published: 2025-12-04 18:30 – Updated: 2025-12-05 02:26
VLAI
Summary
Apache Tika has XXE vulnerability
Details
Critical XXE in Apache Tika tika-core (1.13-3.2.1), tika-pdf-module (2.0.0-3.2.1) and tika-parsers (1.13-1.28.5) modules on all platforms allows an attacker to carry out XML External Entity injection via a crafted XFA file inside of a PDF.
This CVE covers the same vulnerability as in CVE-2025-54988. However, this CVE expands the scope of affected packages in two ways.
First, while the entrypoint for the vulnerability was the tika-parser-pdf-module as reported in CVE-2025-54988, the vulnerability and its fix were in tika-core. Users who upgraded the tika-parser-pdf-module but did not upgrade tika-core to >= 3.2.2 would still be vulnerable.
Second, the original report failed to mention that in the 1.x Tika releases, the PDFParser was in the "org.apache.tika:tika-parsers" module.
Severity
10.0 (Critical)
{
"affected": [
{
"database_specific": {
"last_known_affected_version_range": "\u003c= 3.2.1"
},
"package": {
"ecosystem": "Maven",
"name": "org.apache.tika:tika-core"
},
"ranges": [
{
"events": [
{
"introduced": "1.13"
},
{
"fixed": "3.2.2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "Maven",
"name": "org.apache.tika:tika-parsers"
},
"ranges": [
{
"events": [
{
"introduced": "1.13"
},
{
"fixed": "2.0.0"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"database_specific": {
"last_known_affected_version_range": "\u003c= 3.2.1"
},
"package": {
"ecosystem": "Maven",
"name": "org.apache.tika:tika-parser-pdf-module"
},
"ranges": [
{
"events": [
{
"introduced": "2.0.0"
},
{
"fixed": "3.2.2"
}
],
"type": "ECOSYSTEM"
}
]
}
],
"aliases": [
"CVE-2025-66516"
],
"database_specific": {
"cwe_ids": [
"CWE-611"
],
"github_reviewed": true,
"github_reviewed_at": "2025-12-05T02:24:30Z",
"nvd_published_at": "2025-12-04T17:15:57Z",
"severity": "CRITICAL"
},
"details": "Critical XXE in Apache Tika tika-core (1.13-3.2.1), tika-pdf-module (2.0.0-3.2.1) and tika-parsers (1.13-1.28.5) modules on all platforms allows an attacker to carry out XML External Entity injection via a crafted XFA file inside of a PDF. \n\nThis CVE covers the same vulnerability as in\u00a0CVE-2025-54988. However, this CVE expands the scope of affected packages in two ways. \n\nFirst, while the entrypoint for the vulnerability was the tika-parser-pdf-module as reported in CVE-2025-54988, the vulnerability and its fix were in tika-core. Users who upgraded the tika-parser-pdf-module but did not upgrade tika-core to \u003e= 3.2.2 would still be vulnerable. \n\nSecond, the original report failed to mention that in the 1.x Tika releases, the PDFParser was in the \"org.apache.tika:tika-parsers\" module.",
"id": "GHSA-f58c-gq56-vjjf",
"modified": "2025-12-05T02:26:56Z",
"published": "2025-12-04T18:30:54Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-66516"
},
{
"type": "WEB",
"url": "https://cve.org/CVERecord?id=CVE-2025-54988"
},
{
"type": "PACKAGE",
"url": "https://github.com/apache/tika"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread/s5x3k93nhbkqzztp1olxotoyjpdlps9k"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
"type": "CVSS_V4"
}
],
"summary": "Apache Tika has XXE vulnerability"
}
GHSA-F5G5-7JMH-G5M2
Vulnerability from github – Published: 2022-05-24 17:43 – Updated: 2022-05-24 17:43
VLAI
Details
EPrints 3.4.2 allows remote attackers to read arbitrary files and possibly execute commands via crafted JSON/XML input to a cgi/ajax/phrase URI.
{
"affected": [],
"aliases": [
"CVE-2021-26703"
],
"database_specific": {
"cwe_ids": [
"CWE-611"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2021-03-01T22:15:00Z",
"severity": "CRITICAL"
},
"details": "EPrints 3.4.2 allows remote attackers to read arbitrary files and possibly execute commands via crafted JSON/XML input to a cgi/ajax/phrase URI.",
"id": "GHSA-f5g5-7jmh-g5m2",
"modified": "2022-05-24T17:43:26Z",
"published": "2022-05-24T17:43:26Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2021-26703"
},
{
"type": "WEB",
"url": "https://files.eprints.org/2548"
},
{
"type": "WEB",
"url": "https://files.eprints.org/2549"
},
{
"type": "WEB",
"url": "https://github.com/grymer/CVE/blob/master/eprints_security_review.pdf"
}
],
"schema_version": "1.4.0",
"severity": []
}
GHSA-F5GC-P5M3-V347
Vulnerability from github – Published: 2020-12-02 18:28 – Updated: 2024-10-09 20:55
VLAI
Summary
XXE in petl
Details
Impact
Information Disclosure
Summary
petl is a Python library that provides functions for extraction, transformation, and loading (ETL) of data.
petl before 1.68, in some configurations, allows resolution of entities in XML input.
An attacker who is able to submit XML input to an application using petl can disclose arbitrary files on the file system in the context of the user under which the application is running.
Affected Applications
Applications that:
- accept attacker-supplied XML input that is processed using petl < 1.68
- return the response generated by petl back to the attacker
- configure lxml as the underlying XML processing library used by petl
- have read privileges in filesystem files with sensitive information
Mitigation
Update to petl >= 1.68
Workarounds
- Assure there is no user/external access to the application using petl
- Assure your application is not using the function fromxml()
References
- https://github.com/nvn1729/advisories/blob/master/cve-2020-29128.md
- https://github.com/petl-developers/petl/pull/527
- https://github.com/petl-developers/petl/releases/tag/v1.6.8
- https://petl.readthedocs.io/en/stable/changes.html
- https://owasp.org/www-community/vulnerabilities/XML_External_Entity_(XXE)_Processing
For more information
If you have any questions or comments about this advisory: * Add a comment in the Github issue
Thaks to Naveen Sunkavally.
Severity
{
"affected": [
{
"package": {
"ecosystem": "PyPI",
"name": "petl"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.6.8"
}
],
"type": "ECOSYSTEM"
}
]
}
],
"aliases": [
"CVE-2020-29128"
],
"database_specific": {
"cwe_ids": [
"CWE-611"
],
"github_reviewed": true,
"github_reviewed_at": "2020-12-02T02:29:45Z",
"nvd_published_at": null,
"severity": "HIGH"
},
"details": "### Impact\nInformation Disclosure\n\n### Summary\n\n[petl](https://github.com/petl-developers/petl) is a Python library that provides functions for extraction, transformation, and loading (ETL) of data.\n\npetl before 1.68, in some configurations, allows resolution of entities in XML input.\n\nAn attacker who is able to submit XML input to an application using petl can disclose arbitrary files on the file system in the context of the user under which the application is running.\n\n### Affected Applications\n\nApplications that:\n\n- accept attacker-supplied XML input that is processed using petl \u003c 1.68\n- return the response generated by petl back to the attacker\n- configure lxml as the underlying XML processing library used by petl\n- have read privileges in filesystem files with sensitive information\n\n### Mitigation\nUpdate to petl \u003e= 1.68\n\n### Workarounds\n\n- Assure there is no user/external access to the application using [petl](https://github.com/petl-developers/petl)\n- Assure your application is not using the function [fromxml()](https://petl.readthedocs.io/en/stable/io.html#petl.io.xml.fromxml)\n\n### References\n- https://github.com/nvn1729/advisories/blob/master/cve-2020-29128.md\n- https://github.com/petl-developers/petl/pull/527\n- https://github.com/petl-developers/petl/releases/tag/v1.6.8\n- https://petl.readthedocs.io/en/stable/changes.html\n- https://owasp.org/www-community/vulnerabilities/XML_External_Entity_(XXE)_Processing\n\n### For more information\nIf you have any questions or comments about this advisory:\n* Add a comment in the Github [issue](https://github.com/petl-developers/petl/pull/527)\n\nThaks to Naveen Sunkavally.",
"id": "GHSA-f5gc-p5m3-v347",
"modified": "2024-10-09T20:55:04Z",
"published": "2020-12-02T18:28:30Z",
"references": [
{
"type": "WEB",
"url": "https://github.com/petl-developers/petl/security/advisories/GHSA-f5gc-p5m3-v347"
},
{
"type": "WEB",
"url": "https://github.com/petl-developers/petl/issues/526"
},
{
"type": "WEB",
"url": "https://github.com/petl-developers/petl/pull/527"
},
{
"type": "WEB",
"url": "https://github.com/petl-developers/petl/commit/07420ef8463cc387aea84e2d6241cf556574e2a5"
},
{
"type": "WEB",
"url": "https://github.com/nvn1729/advisories/blob/master/cve-2020-29128.md"
},
{
"type": "PACKAGE",
"url": "https://github.com/petl-developers/petl"
},
{
"type": "WEB",
"url": "https://github.com/petl-developers/petl/compare/v1.6.7...v1.6.8"
},
{
"type": "WEB",
"url": "https://github.com/petl-developers/petl/releases/tag/v1.6.8"
},
{
"type": "WEB",
"url": "https://github.com/pypa/advisory-database/tree/main/vulns/petl/PYSEC-2020-75.yaml"
},
{
"type": "WEB",
"url": "https://owasp.org/www-community/vulnerabilities/XML_External_Entity_(XXE)_Processing"
},
{
"type": "WEB",
"url": "https://petl.readthedocs.io/en/stable/changes.html"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P",
"type": "CVSS_V4"
}
],
"summary": "XXE in petl"
}
GHSA-F5QF-VH69-9Q4R
Vulnerability from github – Published: 2022-05-14 00:55 – Updated: 2025-09-15 14:30
VLAI
Summary
SimpleXML has XML External Entity (XXE) vulnerability
Details
SimpleXML (latest version 2.7.1) is vulnerable to an XXE vulnerability resulting SSRF, information disclosure, DoS and so on.
Severity
9.1 (Critical)
{
"affected": [
{
"package": {
"ecosystem": "Maven",
"name": "org.simpleframework:simple-xml"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "2.7.1"
}
],
"type": "ECOSYSTEM"
}
]
}
],
"aliases": [
"CVE-2017-1000190"
],
"database_specific": {
"cwe_ids": [
"CWE-611"
],
"github_reviewed": true,
"github_reviewed_at": "2022-05-31T17:18:38Z",
"nvd_published_at": "2017-11-17T21:29:00Z",
"severity": "CRITICAL"
},
"details": "SimpleXML (latest version 2.7.1) is vulnerable to an XXE vulnerability resulting SSRF, information disclosure, DoS and so on.",
"id": "GHSA-f5qf-vh69-9q4r",
"modified": "2025-09-15T14:30:53Z",
"published": "2022-05-14T00:55:56Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-1000190"
},
{
"type": "WEB",
"url": "https://github.com/ngallagher/simplexml/issues/18"
},
{
"type": "PACKAGE",
"url": "https://github.com/ngallagher/simplexml"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/708d94141126eac03011144a971a6411fcac16d9c248d1d535a39451%40%3Csolr-user.lucene.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/708d94141126eac03011144a971a6411fcac16d9c248d1d535a39451@%3Csolr-user.lucene.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/8c4ef27e2c0218f29e785990dc919266855aea137c958f10d242cb36%40%3Cdev.lucene.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/8c4ef27e2c0218f29e785990dc919266855aea137c958f10d242cb36@%3Cdev.lucene.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r204ba2a9ea750f38d789d2bb429cc0925ad6133deea7cbc3001d96b5%40%3Csolr-user.lucene.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r204ba2a9ea750f38d789d2bb429cc0925ad6133deea7cbc3001d96b5@%3Csolr-user.lucene.apache.org%3E"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
"type": "CVSS_V3"
}
],
"summary": "SimpleXML has XML External Entity (XXE) vulnerability"
}
GHSA-F5W8-Q66W-XP9M
Vulnerability from github – Published: 2026-04-01 03:31 – Updated: 2026-04-21 00:32
VLAI
Details
Improper Restriction of XML External Entity Reference vulnerability in RTI Connext Professional (Routing Service,Observability Collector,Recording Service,Queueing Service,Cloud Discovery Service) allows Serialized Data External Linking, Data Serializat...
Severity
9.1 (Critical)
{
"affected": [],
"aliases": [
"CVE-2026-4374"
],
"database_specific": {
"cwe_ids": [
"CWE-611"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2026-04-01T02:16:03Z",
"severity": "HIGH"
},
"details": "Improper Restriction of XML External Entity Reference vulnerability in RTI Connext Professional (Routing Service,Observability Collector,Recording Service,Queueing Service,Cloud Discovery Service) allows Serialized Data External Linking, Data Serializat...",
"id": "GHSA-f5w8-q66w-xp9m",
"modified": "2026-04-21T00:32:14Z",
"published": "2026-04-01T03:31:40Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4374"
},
{
"type": "WEB",
"url": "https://www.rti.com/vulnerabilities/#cve-2026-4374"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"type": "CVSS_V4"
}
]
}
GHSA-F5WX-W2F9-82GH
Vulnerability from github – Published: 2022-05-24 17:07 – Updated: 2022-12-19 21:15
VLAI
Summary
XXE vulnerability in Jenkins WebSphere Deployer Plugin
Details
WebSphere Deployer Plugin 1.6.1 and earlier does not configure the XML parser to prevent XML external entity (XXE) attacks. This could be exploited by a user with Job/Configure permissions to upload a specially crafted war file containing a WEB-INF/ibm-web-ext.xml which is parsed by the plugin.
Severity
7.6 (High)
{
"affected": [
{
"package": {
"ecosystem": "Maven",
"name": "org.jenkins-ci.plugins:websphere-deployer"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "1.6.1"
}
],
"type": "ECOSYSTEM"
}
]
}
],
"aliases": [
"CVE-2020-2108"
],
"database_specific": {
"cwe_ids": [
"CWE-611"
],
"github_reviewed": true,
"github_reviewed_at": "2022-12-19T21:15:52Z",
"nvd_published_at": "2020-01-29T16:15:00Z",
"severity": "HIGH"
},
"details": "WebSphere Deployer Plugin 1.6.1 and earlier does not configure the XML parser to prevent XML external entity (XXE) attacks. This could be exploited by a user with Job/Configure permissions to upload a specially crafted war file containing a `WEB-INF/ibm-web-ext.xml` which is parsed by the plugin.",
"id": "GHSA-f5wx-w2f9-82gh",
"modified": "2022-12-19T21:15:52Z",
"published": "2022-05-24T17:07:41Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-2108"
},
{
"type": "PACKAGE",
"url": "https://github.com/jenkinsci/websphere-deployer-plugin"
},
{
"type": "WEB",
"url": "https://jenkins.io/security/advisory/2020-01-29/#SECURITY-1719"
},
{
"type": "WEB",
"url": "http://www.openwall.com/lists/oss-security/2020/01/29/1"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L",
"type": "CVSS_V3"
}
],
"summary": "XXE vulnerability in Jenkins WebSphere Deployer Plugin"
}
GHSA-F5XG-C8RX-G728
Vulnerability from github – Published: 2022-05-24 16:51 – Updated: 2024-04-04 01:23
VLAI
Details
An issue was discovered in Ahsay Cloud Backup Suite before 8.1.1.50. When sending an out-of-bounds XML document to a URL, it is possible to read the file structure and even the content of files without authentication.
Severity
7.5 (High)
{
"affected": [],
"aliases": [
"CVE-2019-10266"
],
"database_specific": {
"cwe_ids": [
"CWE-611"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2019-07-26T21:15:00Z",
"severity": "HIGH"
},
"details": "An issue was discovered in Ahsay Cloud Backup Suite before 8.1.1.50. When sending an out-of-bounds XML document to a URL, it is possible to read the file structure and even the content of files without authentication.",
"id": "GHSA-f5xg-c8rx-g728",
"modified": "2024-04-04T01:23:08Z",
"published": "2022-05-24T16:51:29Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-10266"
},
{
"type": "WEB",
"url": "https://www.wbsec.nl/ahsay"
},
{
"type": "WEB",
"url": "http://packetstormsecurity.com/files/153772/Ahsay-Backup-7.x-8.x-XML-Injection.html"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"type": "CVSS_V3"
}
]
}
Mitigation
Implementation
System Configuration
Many XML parsers and validators can be configured to disable external entity expansion.
CAPEC-221: Data Serialization External Entities Blowup
This attack takes advantage of the entity replacement property of certain data serialization languages (e.g., XML, YAML, etc.) where the value of the replacement is a URI. A well-crafted file could have the entity refer to a URI that consumes a large amount of resources to create a denial of service condition. This can cause the system to either freeze, crash, or execute arbitrary code depending on the URI.