René's URL Explorer Experiment

{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"Client_DOM_Stored_XSS @ xxe.jsp","articleBody":"**Client\\_DOM\\_Stored\\_XSS** issue exists @ **xxe\\.jsp** in branch **master**\r\n\r\nThe application's Cx4aa65272 embeds untrusted data in the generated output with html, at line 16 of /src/main/webapp/vulnerability/Injection/xxe.jsp. This untrusted data is embedded straight into the output without proper sanitization or encoding, enabling an attacker to inject malicious code into the output.\r\n\r\n**Namespace:** mridilla\r\n**Repository:** JavaVulnerableLab\r\n**Repository Url:** https://github.com/mridilla/JavaVulnerableLab\r\n**CxAST\\-Project:** mridilla/JavaVulnerableLab\r\n**CxAST platform scan:** [e1fc43b6\\-0e4d\\-4a93\\-8009\\-8fe24d4a9091](https://ast.checkmarx.net/projects/188bd83b-3bc2-4f79-9ccc-90f764c20505/scans?id=e1fc43b6-0e4d-4a93-8009-8fe24d4a9091\u0026branch=master)\r\n**Branch:** master\r\n**Application:** JavaVulnerableLab\r\n**Severity:** HIGH\r\n**State:** TO_VERIFY\r\n**Status:** RECURRENT\r\n**CWE:** 79\r\n**Lines:** [12](https://github.com/mridilla/JavaVulnerableLab/blob/master/src/main/webapp/vulnerability/Injection/xxe.jsp#L12) [15](https://github.com/mridilla/JavaVulnerableLab/blob/master/src/main/webapp/vulnerability/Injection/xxe.jsp#L15) \r\n\r\n----\r\n**References**\r\n[Read more](https://ast.checkmarx.net/results/e1fc43b6-0e4d-4a93-8009-8fe24d4a9091/188bd83b-3bc2-4f79-9ccc-90f764c20505/sast/description/79/1779421333800271656)\r\n","author":{"url":"https://github.com/mridilla","@type":"Person","name":"mridilla"},"datePublished":"2022-07-01T14:26:24.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":0},"url":"https://github.com/96/JavaVulnerableLab/issues/96"}