Home / Vulnerability Database / Config files : XML schema insecure settings
Config files

Config files : XML schema insecure settings

Classification

PCI DSS 4.0

Overview

An unsafe XML schema setting maxOccurs="unbounded" is set. It can lead to a DOS attack.

Processing XML files requires significant resources. If an unlimited size of an XML file is allowed in the schema, an attacker can exploit it and submit an XML file with a large number of elements to the input of the application, which will cause a large amount of computation and may disrupt the normal work of the application.

MEDIUM

DerScanner Severity Score

Do you want to fix Config files : XML schema insecure settings in your application?

See also

Config files

Config files : Text4Shell Vulnerability

Config files

Config files : Incorrect directory deletion

Config files

Config files : Code injection