XML injection
Summary: XML or SOAP injection vulnerabilities arise when user input is inserted into a server-side XML document or SOAP message in an unsafe way, letting XML metacharacters modify the structure of the resulting XML. Depending on how the XML is used, this can interfere with application logic, enable unauthorized actions, or expose sensitive data, and PortSwigger notes such flaws can be difficult to detect and exploit remotely.
Key Takeaway: The fix is narrow and known - block or entity-encode the < and > characters before input reaches an XML document or SOAP message - yet the consequence of missing it is unauthorized actions or access to sensitive data, and remote detection is hard enough that the flaw can sit unnoticed.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026