> ## Documentation Index
> Fetch the complete documentation index at: https://docs.codeant.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Tainted xpath from http request

<AccordionGroup>
  <Accordion title="tainted-xpath-from-http-request">
    Detected input from a HTTPServletRequest going into a XPath evaluate or compile command. This could lead to xpath injection if variables passed into the evaluate or compile commands are not properly sanitized. Xpath injection could lead to unauthorized access to sensitive information in XML documents. Instead, thoroughly sanitize user input or use parameterized xpath queries if you can.<br />**Likelihood**: HIGH<br />**Confidence**: MEDIUM<br />**CWE**: <br />- CWE-643: Improper Neutralization of Data within XPath Expressions ('XPath Injection')
    <br />**OWASP**: <br />- A03:2021 - Injection
  </Accordion>
</AccordionGroup>