org.sonar.plugins.csharp.S2755.json Maven / Gradle / Ivy

Go to download

Show more of this group Show more artifacts with this name
Show all versions of sonarlint-omnisharp-plugin Show documentation

Code Analyzer based on Omnisharp

There is a newer version: 1.26.0.100277

Show newest version

{
  "title": "XML parsers should not be vulnerable to XXE attacks",
  "type": "VULNERABILITY",
  "code": {
    "impacts": {
      "SECURITY": "HIGH"
    },
    "attribute": "COMPLETE"
  },
  "status": "ready",
  "remediation": {
    "func": "Constant\/Issue",
    "constantCost": "15min"
  },
  "tags": [
    "cwe"
  ],
  "defaultSeverity": "Blocker",
  "ruleSpecification": "RSPEC-2755",
  "sqKey": "S2755",
  "scope": "Main",
  "securityStandards": {
    "CWE": [
      611,
      827
    ],
    "OWASP": [
      "A4"
    ],
    "OWASP Top 10 2021": [
      "A5"
    ],
    "PCI DSS 3.2": [
      "6.5.1"
    ],
    "PCI DSS 4.0": [
      "6.2.4"
    ],
    "ASVS 4.0": [
      "5.5.2"
    ],
    "STIG ASD 2023-06-08": [
      "V-222608"
    ]
  },
  "quickfix": "unknown"
}