Detections
Analytics
XML External Entity
Description
An XML External Entity attack is a type of attack against an application that parses XML input.
This attack occurs when XML input containing a reference to an external entity is processed by a weakly configured XML parser.
This attack may lead to the disclosure of confidential data, denial of service, port scanning from the perspective of the machine where the parser is located, and other system impacts.
Products, Sensors, and Dependencies
| Product | Dependencies | Data source | Access required | Protocol | Data Collected | Notes |
|---|---|---|---|---|---|---|
| Tenable Web App Scanning | Web Applications | Authenticated Scan | HTTP/HTTPS | XML External Entity | Plugin ID: 98113 |
References
Attack Path Technique Details
Framework: OWASP
Family: Injection
Technique: XML External Entity
Sub-Technique: XML External Entity
Platform: Web Application
Products Required: Tenable Web App Scanning
Tenable Release Date: 2022 Q2