René's URL Explorer Experiment

{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"CX Improper_Restriction_of_XXE_Ref @ src/main/java/org/cysecurity/cspf/jvl/controller/xxe.java [refs/heads/master]","articleBody":"**Improper_Restriction_of_XXE_Ref** issue exists @ **src/main/java/org/cysecurity/cspf/jvl/controller/xxe.java** in branch **refs/heads/master**\r\n\r\n*The processRequest loads and parses XML using parse, at line 48 of src\\main\\java\\org\\cysecurity\\cspf\\jvl\\controller\\xxe.java.\nThis XML was received earlier from user input, getInputStream, at line 44 of src\\main\\java\\org\\cysecurity\\cspf\\jvl\\controller\\xxe.java. Note that parse is set to automatically load and replace any DTD entity references in the XML, including references to external files.*\r\n\r\nSeverity: Medium\r\n\r\nCWE:611\r\n\r\n[Vulnerability details and guidance](https://cwe.mitre.org/data/definitions/611.html)\r\n\r\n[Checkmarx](https://cxprivatecloud.checkmarx.net/CxWebClient/ViewerMain.aspx?scanid=1007325\u0026projectid=1350\u0026pathid=255)\r\n\r\n[Training](null)\r\n[Recommended Fix](https://cxprivatecloud.checkmarx.net/CxWebClient/ScanQueryDescription.aspx?queryID=3522\u0026queryVersionCode=91493105\u0026queryTitle=Improper_Restriction_of_XXE_Ref)\r\n\r\nLines: 44 \r\n\r\n---\r\n[Code (Line #44):](null#L44)\r\n```\r\n          InputStream xml=request.getInputStream();\r\n```\r\n---\r\n","author":{"url":"https://github.com/github-actions[bot]","@type":"Person","name":"github-actions[bot]"},"datePublished":"2022-03-14T18:35:23.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":1},"url":"https://github.com/196/JavaVulnerableLab/issues/196"}