CVE-2016-6798

critical Apache
CVSS v3 Base Score
9.8
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
1.3%
Exploitation probability in 30 days
Top 20% most likely to be exploited
Attack Characteristics
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Confidentiality
High
Integrity
High
Availability
High
Published: July 19, 2017 (3221 days ago)
Last Modified: May 13, 2026
Vendor: Apache
Source: NVD

Description

In the XSS Protection API module before 1.0.12 in Apache Sling, the method XSS.getValidXML() uses an insecure SAX parser to validate the input string, which allows for XXE attacks in all scripts which use this method to validate user input, potentially allowing an attacker to read sensitive data on the filesystem, perform same-site-request-forgery (SSRF), port-scanning behind the firewall or DoS the application.

CWE

CWE-611

Affected Products

apache sling

References

🔗 www.securityfocus.com 🔗 lists.apache.org 🔗 www.securityfocus.com 🔗 lists.apache.org