Red Hat XML Language Support up to 0.9.0 LSPXMLParserConfiguration.java XML Document xml injection

Summaryinfo

A vulnerability classified as critical has been found in Red Hat XML Language Support up to 0.9.0. Affected by this issue is some unknown functionality of the file extensions/contentmodel/participants/diagnostics/LSPXMLParserConfiguration.java. The manipulation as part of XML Document leads to xml injection. This vulnerability is documented as CVE-2019-18213. The attack can be initiated remotely. There is not any exploit available. It is recommended to upgrade the affected component.

Detailsinfo

A vulnerability, which was classified as critical, has been found in Red Hat XML Language Support up to 0.9.0. This issue affects some unknown processing of the file extensions/contentmodel/participants/diagnostics/LSPXMLParserConfiguration.java. The manipulation as part of a XML Document leads to a xml injection vulnerability. Using CWE to declare the problem leads to CWE-91. The product does not properly neutralize special elements that are used in XML, allowing attackers to modify the syntax, content, or commands of the XML before it is processed by an end system. Impacted is confidentiality, integrity, and availability. The summary by CVE is:

XML Language Server (aka lsp4xml) before 0.9.1, as used in Red Hat XML Language Support (aka vscode-xml) before 0.9.1 for Visual Studio and other products, allows XXE via a crafted XML document, with resultant SSRF (as well as SMB connection initiation that can lead to NetNTLM challenge/response capture for password cracking). This occurs in extensions/contentmodel/participants/diagnostics/LSPXMLParserConfiguration.java.

The weakness was released 10/23/2019 (GitHub Repository). The advisory is shared at github.com. The identification of this vulnerability is CVE-2019-18213 since 10/19/2019. The attack may be initiated remotely. Required for exploitation is a simple authentication. Technical details are known, but no exploit is available. MITRE ATT&CK project uses the attack technique T1505 for this issue.

Upgrading to version 0.9.1 eliminates this vulnerability.

Entry connected to this vulnerability is available at VDB-144100. If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Vendor

• Red Hat

Name

• XML Language Support

Version

• 0.1
• 0.2
• 0.3
• 0.4
• 0.5
• 0.6
• 0.7
• 0.8
• 0.9.0

License

• open-source

Website

• Vendor: https://www.redhat.com/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion