CVE-2018-1000827

2018-12-2015:00:00

mitre

www.cve.org

ubilling version

user-controlled parameter

vulnerability

disclosure of confidential data

denial of service

ssrf

remote code execution

AI Score

9.8

Confidence

High

EPSS

0.012

Percentile

85.2%

JSON

Ubilling version <= 0.9.2 contains a Other/Unknown vulnerability in user-controlled parameter that can result in Disclosure of confidential data, denial of service, SSRF, remote code execution.

References

0dd.zone/2018/10/28/ubilling-Object-Injection/

github.com/nightflyza/Ubilling/issues/330