XML External Entity (XXE) in Talend/connectors-lib-se (main)

Issue Details

• Vulnerability: XML External Entity (XXE)
• Severity: Hign
• Project: Talend/connectors-lib-se
• Branch: main
• Scan Date: Unknown

Issue Description

xmlbeans is vulnerable to XML External Entity attacks. The vulnerability exists due to the lack of sanitization of XML input containing a reference to an external entity which is processed by a weakly configured XML parser allowing an attacker to exhaust the system resource via recursive external entity pointers.

View more details