CVE-2016-6798 Security Details

CVE ID

CVE-2016-6798

CWE

CWE-611

CVE Description

In the XSS Protection API module before 1.0.12 in Apache Sling, the method XSS.getValidXML() uses an insecure SAX parser to validate the input string, which allows for XXE attacks in all scripts which use this method to validate user input, potentially allowing an attacker to read sensitive data on the filesystem, perform same-site-request-forgery (SSRF), port-scanning behind the firewall or DoS the application.

Published

Jul 26, 2017

CVSS Score & Severity

9.8Critical

CVSS Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Score

1.343%

Malware

malware

KEV Status

Not in KEV Catalog: No known exploits

Vulnerable Methods

org/apache/sling/xss/impl/XSSAPIImpl.activate()V

JVM

Affected Ecosystems

affected

Source

National Vulnerability Database

References

Apache Jira · SLING-5954PROJECT

seclists.orgTHIRD_PARTY