Vulnerabilities > CVE-2019-18213 - XXE vulnerability in multiple products

CVSS 8.8 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

xml-language-server-project

eclipse

theia-xml-extension-project

CWE-611

NVD

Published: 2019-10-23

Updated: 2021-07-21

Summary

XML Language Server (aka lsp4xml) before 0.9.1, as used in Red Hat XML Language Support (aka vscode-xml) before 0.9.1 for Visual Studio and other products, allows XXE via a crafted XML document, with resultant SSRF (as well as SMB connection initiation that can lead to NetNTLM challenge/response capture for password cracking). This occurs in extensions/contentmodel/participants/diagnostics/LSPXMLParserConfiguration.java.

Vulnerable Configurations

Part	Description	Count
Application	Xml_Language_Server_Project XML Language Server Project XML Server Project - XML Language Server Project XML Server Project 0.0.1 XML Language Server Project XML Server Project 0.0.2 XML Language Server Project XML Server Project 0.3.0 XML Language Server Project XML Server Project 0.4.0 XML Language Server Project XML Server Project 0.5.0 XML Language Server Project XML Server Project 0.5.1 XML Language Server Project XML Server Project 0.6.0 XML Language Server Project XML Server Project 0.7.0 XML Language Server Project XML Server Project 0.8.0 XML Language Server Project XML Server Project 0.9.0	11
Application	Eclipse Eclipse Wild WEB Developer -	1
Application	Theia_Xml_Extension_Project Theia XML Extension Project Theia XML Extension -	1

Common Weakness Enumeration (CWE)

CWE-611 - Improper Restriction of XML External Entity Reference ('XXE')

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References