Lucene search
Veracode Vulnerability DatabaseVERACODE:29657HistoryMar 10, 2021 - 7:22 a.m.
Misinterpretation Of Malicious XML Input
2021-03-1007:22:41
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
90
xml injection
parsing
serializing
system identifiers
fpis
namespaces
EPSS
0.003
Percentile
69.6%
xmldom is vulnerable to XML injection. Repeated parsing and serializing of malicious documents can result in incorrect preservation of system identifiers, FPIs or namespaces.
References
github.com/xmldom/xmldom/commit/64c73883abf12dc023262c2c078a68313a0f540c
github.com/xmldom/xmldom/commit/d4201b9dfbf760049f457f9f08a3888d48835135
github.com/xmldom/xmldom/pull/181
github.com/xmldom/xmldom/releases/tag/0.5.0
github.com/xmldom/xmldom/security/advisories/GHSA-h6q6-9hqw-rwfv
www.npmjs.com/package/xmldom
Related
osv
osv
CVE-2021-21366
2021-03-12 17:15:12
Misinterpretation of malicious XML input
2021-03-12 22:39:39
node-xmldom - security update
2023-01-01 00:00:00
github
github
Misinterpretation of malicious XML input
2021-03-12 22:39:39
nodejs
nodejs
Misinterpretation of malicious XML input
2021-03-12 22:42:38
nvd
nvd
CVE-2021-21366
2021-03-12 17:15:12
cvelist
cvelist
CVE-2021-21366 Misinterpretation of malicious XML input
2021-03-12 00:00:00
prion
prion
Input validation
2021-03-12 17:15:00
redhatcve
redhatcve
CVE-2021-21366
2023-05-29 18:40:08
debiancve
debiancve
CVE-2021-21366
2021-03-12 17:15:12
cve
cve
CVE-2021-21366
2021-03-12 17:15:12
ubuntucve
ubuntucve
CVE-2021-21366
2021-03-12 00:00:00
ibm
ibm
Security Bulletin: A security vulnerability in Node.js xmldom and msgpack5 module affects IBM Cloud Automation Manager
2023-05-15 12:07:40
nessus
nessus
Debian DLA-3260-1 : node-xmldom - LTS security update
2023-01-07 00:00:00
Ubuntu 20.04 LTS / 22.04 LTS : xmldom vulnerabilities (USN-6102-1)
2023-05-24 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-6102-1)
2023-05-25 00:00:00
Debian: Security Advisory (DLA-3260-1)
2023-01-02 00:00:00
ubuntu
ubuntu
xmldom vulnerabilities
2023-05-24 00:00:00
debian
debian
[SECURITY] [DLA 3260-1] node-xmldom security update
2023-01-01 17:00:48