Using blacklisted XML parsing function is dangerous

[anshumanbh]

Find more live information in Aikido here: https://app.aikido.dev/queue?sidebarIssue=2217903&groupId=6189&sidebarIssueTask=1405595&sidebarTab=tasks

Scope

This task includes issues in the following code repository:

• kubebot: utils/wfuzzbasicauthbrute/wfuzz/plugins/scripts/sitemap.py at line 23

TLDR

Using xml.dom.minidom.parse to parse untrusted XML data is known to be vulnerable to XML attacks.

How to fix

Replace xml.dom.minidom.parse with its defusedxml equivalent function.