CVE-2018-1000837

2022-10-0316:22:00

mitre

www.cve.org

cve-2018-1000837

xml parser

disclosure of confidential data

denial of service

ssrf

malicious plugins.xml

9.3 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

57.7%

JSON

UML Designer version <= 8.0.0 contains a XML External Entity (XXE) vulnerability in XML parser for plugins that can result in Disclosure of confidential data, denial of service, SSRF, port scanning. This attack appear to be exploitable via malicious plugins.xml file.