Common Weakness Enumeration
CWE-827 Improper Control of Document Type Definition
Description
The product does not restrict a reference to a Document Type Definition (DTD) to the intended control sphere. This might allow attackers to reference arbitrary DTDs, possibly causing the product to expose files, consume excessive system resources, or execute arbitrary http requests on behalf of the attacker.
Associated Reviewed Advisories
Vulnerabilities classified under CWE-827 ordered by modification date.
No Reviewed Advisories Found
There are no reviewed OSV records mapped to this CWE at this time.