漏洞类别:Web Application Firewall
漏洞等级:
漏洞信息
When a XML/JSON message is invalid or malformed it could conduct to errors in parsing allowing an attacker to find a vulnerable entry point in the web service.
漏洞危害
When a malformed or invalid XML/JSON message is parsed by the application, it can conduct to memory corruption allowing an attacker to send malicious payloads in order to execute remote commands or make the application crash.
解决方案
The web server must validate the XML/JSON message before trying to parse it and drop the request when an invalid or malformed payload is received.
0daybank
文章评论