TechQA.

Question

'XML External Entity Injection' issue isn't resolving even after fortify recommended suggestion

score 27 · Answer 1 · 2024-03-25T10:07:26.667000

0

Answer

27

Views

'XML External Entity Injection' issue isn't resolving even after fortify recommended suggestion

27 views Asked by SATYAJIT PATIL At 25 March 2024 at 10:07

score 42 · Answer 2 · 2023-09-02T18:31:13.213000

XXE Prevention of Spring Webservice Soap Reaquest

42 views Asked by Kunu At 02 September 2023 at 18:31

score 124 · Answer 3 · 2023-08-30T20:07:18.447000

Validate xml against a given xsd in static block vs non-static

124 views Asked by likeGreen At 30 August 2023 at 20:07

score 347 · Answer 4 · 2023-08-28T13:30:31.293000

How to prevent XML external entity attack (XXE attack) on SOAP Request(Jaxws-spring) Webservice

347 views Asked by Kunu At 28 August 2023 at 13:30

score 190 · Answer 5 · 2023-08-02T13:18:05.617000

TransformerFactory with FOP : Issue when disabling ACCESS_EXTERNAL_DTD

190 views Asked by Sybuser At 02 August 2023 at 13:18

score 164 · Answer 6 · 2023-05-09T15:48:58.870000

Unexpected Veracode error "Improper Restriction of XML External Entity Reference (CWE ID 611)" (XMLInputFactory vulnerable to XXE)

164 views Asked by Drew Stevens At 09 May 2023 at 15:48

score 79 · Answer 7 · 2023-05-08T09:49:38.490000

How to prevent XXE attacks on dom4j 2.1.1?

79 views Asked by Tejas Kumar Y N At 08 May 2023 at 09:49

score 5601 · Answer 8 · 2023-03-22T17:31:36.463000

java.lang.IllegalArgumentException: Not supported: http://javax.xml.XMLConstants/property/accessExternalDTD

5.6k views Asked by tarekahf At 22 March 2023 at 17:31

score 142 · Answer 9 · 2022-07-16T19:29:03.723000

Does having to be an authenticated and authorized user to access a feature reduce or eliminate the risk and impact of a security vulnerability?

142 views Asked by JakeyBoy At 16 July 2022 at 19:29

score 1283 · Answer 10 · 2021-10-29T16:05:19.810000

Hi, I'm facing a blocker in a SonarQube violation - Disable access to external entities in XML parsing

1.2k views Asked by Dharani Dharan At 29 October 2021 at 16:05

score 260 · Answer 11 · 2021-10-17T02:26:21.493000

What is the meaning of '%' in this XML DTD?

260 views Asked by Camille Ferrous At 17 October 2021 at 02:26

score 436 · Answer 12 · 2021-03-19T19:11:29.963000

Web Api XXE(Xml eXternal Entity) injection despite not allowing XML

436 views Asked by Developer At 19 March 2021 at 19:11

score 119 · Answer 13 · 2021-03-18T19:51:45.367000

XXE prevention with RestTemplate SpringBoot 2.3.3

119 views Asked by adi At 18 March 2021 at 19:51

score 1594 · Answer 14 · 2021-01-28T15:03:00.413000

IllegalArgumentException: Not supported when implement sonarqube solution for "XML parsers should not be vulnerable to XXE attacks"

1.5k views Asked by Marco R. At 28 January 2021 at 15:03

score 1027 · Answer 15 · 2021-01-18T23:12:22.667000

How to assign XML DTD entity to attribute value

1k views Asked by FunnyDeadCat At 18 January 2021 at 23:12

score 1080 · Answer 16 · 2020-09-03T10:22:19.603000

XXE billion laughs attack seems not to be mitigated as expected by the Sonar recommended solution to prevent XXE attacks

1k views Asked by John Donn At 03 September 2020 at 10:22

score 1491 · Answer 17 · 2020-08-06T22:19:18.367000

TransformerFactory still vulnerable to XXE attacks

1.4k views Asked by Anil At 06 August 2020 at 22:19

score 254 · Answer 18 · 2020-07-23T21:10:59.627000

How do I know whether my application is vulnerable to CVE-2020-13692?

254 views Asked by Anonymous User At 23 July 2020 at 21:10

score 2822 · Answer 19 · 2020-04-21T07:55:42.703000

Fortify XML External Entities (XXE)

2.8k views Asked by Vikki At 21 April 2020 at 07:55

score 1054 · Answer 20 · 2020-04-03T21:25:13.370000

Are XML parsers safe from XML External Entity (XML) injection in .NET Core?

1k views Asked by srk At 03 April 2020 at 21:25

TechQA.

List Question

'XML External Entity Injection' issue isn't resolving even after fortify recommended suggestion

XXE Prevention of Spring Webservice Soap Reaquest

Validate xml against a given xsd in static block vs non-static

How to prevent XML external entity attack (XXE attack) on SOAP Request(Jaxws-spring) Webservice

TransformerFactory with FOP : Issue when disabling ACCESS_EXTERNAL_DTD

Unexpected Veracode error "Improper Restriction of XML External Entity Reference (CWE ID 611)" (XMLInputFactory vulnerable to XXE)

How to prevent XXE attacks on dom4j 2.1.1?

java.lang.IllegalArgumentException: Not supported: http://javax.xml.XMLConstants/property/accessExternalDTD

Does having to be an authenticated and authorized user to access a feature reduce or eliminate the risk and impact of a security vulnerability?

Hi, I'm facing a blocker in a SonarQube violation - Disable access to external entities in XML parsing

What is the meaning of '%' in this XML DTD?

Web Api XXE(Xml eXternal Entity) injection despite not allowing XML

XXE prevention with RestTemplate SpringBoot 2.3.3

IllegalArgumentException: Not supported when implement sonarqube solution for "XML parsers should not be vulnerable to XXE attacks"

How to assign XML DTD entity to attribute value

XXE billion laughs attack seems not to be mitigated as expected by the Sonar recommended solution to prevent XXE attacks

TransformerFactory still vulnerable to XXE attacks

How do I know whether my application is vulnerable to CVE-2020-13692?

Fortify XML External Entities (XXE)

Are XML parsers safe from XML External Entity (XML) injection in .NET Core?

Popular Questions

Trending Questions