Xml Node Xxe

User controlled data in XML parsers can result in XML External or Internal Entity (XXE) Processing vulnerabilities

IndexedPublic repositoryHighMedium confidenceVerifiedLGPL-3.0-onlyjavascript
greprules fetch gitlab-sast-rules-lgpl-javascript-xml-rule-node-xxe --engine opengrep

Description

User controlled data in XML parsers can result in XML External or Internal Entity (XXE) Processing vulnerabilities

Detection target

Not provided

Recommended fix

Not provided

False-positive notes

Not provided

Community feedback

Sign in to report false positives, mark this rule useful, or suggest metadata improvements.