RULE(RULE ID:334138)

Rule General Information
Release Date: 2021-11-17
Rule Name: Generic XML External Entity Injection Vulnerability
Severity:
CVE ID:
Rule Protection Details
Description: XML is used to mark electronic documents, which has a structural markup language. It can be used to mark data and define data types. It is a source language that allows users to define their own markup language. XxE attacks enter malicious code through DTD external entity declarations.
Impact: An attacker could exploit this vulnerability to have unspecified effect.
Affected OS: Windows, Linux, Others
Reference:
Solutions
Please contact the software vendor to update the software patch.