5

I found out that an endpoint of a website may be vulnerable to XXE. It is using Unmarshal as an XML parser. When I try to send a post request using common XXE payloads, I receive the following response from the server:

[org.xml.sax.SAXParseException; lineNumber: 1; columnNumber: 54; DOCTYPE is disallowed when the feature \"http://apache.org/xml/features/disallow-doctype-decl\" set to true.]

Is there any payload that doesn't need the doctype declaration? Is it possible to exploit this XXE or not?

kc2001
  • 117
  • 6
Jyosk Natalm
  • 61
  • 3
  • Did you ever find a way? Maybe an X-include attack? https://portswigger.net/web-security/xxe#xinclude-attacks – borizzzzz Apr 28 '21 at 12:42

0 Answers0