Category-1030: OWASP 2017年十大分类A4-XML外部实体(XXE)

ID: 1030 Status: Incomplete

Summary

Weaknesses in this category are related to the A4 category in the OWASP Top Ten 2017.

Membership

ID NAME
CWE-611 XML外部实体引用的不恰当限制(XXE)
CWE-776 DTD中递归实体索引的不恰当限制(XML实体扩展)

References

REF-957 Top 10 2017