I would like to report an XML External Entity (XXE) vulnerability in the latest version 0.2.3.
The feature which converts an XML document into a JSON, the module does not validate/sanitizes the external DTD's.
Impact: Sensitive Information Disclosure
Please contact me for the POC if required. Thanks.
I would like to report an XML External Entity (XXE) vulnerability in the latest version 0.2.3.
The feature which converts an XML document into a JSON, the module does not validate/sanitizes the external DTD's.
Impact: Sensitive Information Disclosure
Please contact me for the POC if required. Thanks.