CyberRota Analysis
AI-GeneratedQt XML versions 4.0.0 through 6.11 are vulnerable to XML injection due to improper output neutralization, allowing untrusted text to inject arbitrary XML markup through QDom comment, CDATA, and processing-instruction serialization. This vulnerability can lead to potential data manipulation or execution of unintended commands within applications that utilize these XML functionalities. Developers and organizations using affected versions of Qt should prioritize upgrading to version 6.12 to mitigate the risk.
Original NVD Description
Improper output neutralization (XML injection) in QDom comment, CDATA, and processing-instruction serialization in Qt XML from 4.0.0 through 6.11 allows untrusted text serialized by an application into those nodes to inject arbitrary XML markup, because the node terminators are not escaped under the default InvalidDataPolicy (AcceptInvalidChars). Fixed in Qt 6.12.