Xxe XMLRdr

XML External Entity (XXE) attacks can occur when an XML parser supports XML entities while processing XML received from an untrusted source.

IndexedPublic repositoryHighMedium confidenceVerifiedLGPL-3.0-onlykotlin
greprules fetch gitlab-sast-rules-lgpl-kotlin-xxe-rule-xmlrdr --engine opengrep

Description

XML External Entity (XXE) attacks can occur when an XML parser supports XML entities while processing XML received from an untrusted source.

Detection target

Not provided

Recommended fix

Not provided

False-positive notes

Not provided

Community feedback

Sign in to report false positives, mark this rule useful, or suggest metadata improvements.