Xxe SaxParserXXE

XML External Entity (XXE) attacks can occur when an XML parser supports XML entities while processing XML received from an untrusted source.

IndexedPublic repositoryHighHigh confidenceVerifiedMIT

Scala

greprules fetch gitlab-sast-scala-xxe-rule-saxparserxxe --engine opengrep

Description

XML External Entity (XXE) attacks can occur when an XML parser supports XML entities while processing XML received from an untrusted source.

License: MIT
Source context: Public repository
Source: https://gitlab.com/gitlab-org/security-products/sast-rules
Validation status: Verified
Quality signals: 1.2K downloads
0 direct1.2K via packs
· 0 stars · Quality score 86How quality works
Included packs: 2 packs

0 rule-level signals from signed-in users.

Aggregated from approved scan feedback. False-positive reports describe observed scan contexts, not a global rule verdict.

Precision details are collecting more signed-in reports before verdict counts or ratios are emphasized.

Finding verdicts0

No approved finding verdicts yet.

Scan diagnostics0

No scan diagnostics reported yet.