CVE-2026-19614 : 상세 정보

CVE-2026-19614

2026-09-08
11h17 +00:00
A05-Security Misconfiguration
2026-09-09
15h46 +00:00
특정 CVE 알림
특정 CVE의 변경 사항에 대한 정보를 받아보세요.
알림 관리

CVE 설명

The API is prone to XML external entity (XXE) injection. By default, XML external entity support is enabled. This issue affects NanoXML: 2.2.3.

CVE 정보

관련 약점

CWE-ID 약점 이름 출처
CWE-611 Improper Restriction of XML External Entity Reference
The product processes an XML document that can contain XML entities with URIs that resolve to documents outside of the intended sphere of control, causing the product to embed incorrect documents into its output.

참고 자료