This page is experimental and may change significantly in future releases.
Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')
Properties
id: d3f:CWE-776
- name
- Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')
- definition
- The product uses XML documents and allows their structure to be defined with a Document Type Definition (DTD), but it does not properly control the number of recursive definitions of entities.
- synonyms
- XEE
- synonyms
- XML Bomb
- synonyms
- Billion Laughs Attack
Neighbors
CWE-776 has no direct neighbors in this release.Inferred Relationships
Related Countermeasure Techniques
Related Weaknesses
CWE-776 has no related weaknesses in this release.