Lucene search

K
cvelistMitreCVELIST:CVE-2018-1000844
HistoryDec 20, 2018 - 3:00 p.m.

CVE-2018-1000844

2018-12-2015:00:00
mitre
www.cve.org
5
square open source
retrofit
xml external entity (xxe)
vulnerability
fixed
jaxb
ssrf

AI Score

9.2

Confidence

High

EPSS

0.002

Percentile

54.2%

Square Open Source Retrofit version Prior to commit 4a693c5aeeef2be6c7ecf80e7b5ec79f6ab59437 contains a XML External Entity (XXE) vulnerability in JAXB that can result in An attacker could use this to remotely read files from the file system or to perform SSRF… This vulnerability appears to have been fixed in After commit 4a693c5aeeef2be6c7ecf80e7b5ec79f6ab59437.

AI Score

9.2

Confidence

High

EPSS

0.002

Percentile

54.2%

Related for CVELIST:CVE-2018-1000844