General Information

XML Entity Reference Attack

Variants:
Direct 

Also Known As:
DTD Entity Reference Attack

Vector Type:
Attack

Relevance:
Generic

Layer:
Application-Level

Platforms:
Any

Target Type:
Web Application, Web Service

Affected Mechanisms:
Schema Validation, Web Server Configuration, Hardening

Invented In:
28/07/2007

Added In:
26/12/2014



Direct Variant:

XML Entity Reference Attack

Also Known As:
DTD Entity Reference Attack

Typical Severity:
Minor

Resources:

White Papers:

Learn More: