Amazon QDetector Library Sign in to Amazon Q

Detector Library

Tag: xmlFeedback

Amazon Q

Detector Library

Ruby detectors (29/29)

SQL Injection Divide by Zero Sensitive HTTP Action Insufficient Protected Credentials Sensitive Information Leak Cross-Site Request Forgery (CSRF)Untrusted Deserialization Log Injection XML External Entity Path Injection Deprecated Get Configuration Http to File Access Insufficient Key Size Code Injection OS Command Injection Insecure Cookie Resource leak Cross Site Scripting (XSS)Untrusted Open Model Attr Accessible Server Side Request Forgery Improper Input Validation Stack Trace Exposure Open Redirect Improper Certificate Validation send_file Injection Unsafe File Permissions Insecure Cryptography Tainted Format

Tag: xml

XML External Entity

Objects that parse or handle XML can lead to XML External Entity (XXE) attacks when misconfigured.