CVE-2018-1000546

2018-06-2616:29:02

Google

osv.dev

0.006 Low

EPSS

Percentile

78.7%

JSON

Triplea version <= 1.9.0.0.10291 contains a XML External Entity (XXE) vulnerability in Importing game data that can result in Possible information disclosure, server-side request forgery, or remote code execution. This attack appear to be exploitable via Specially crafted game data file (XML).

CPENameOperatorVersion
tripleaeq1.9.0.0.2801
tripleaeq1.9.0.0.9717
tripleaeq1.9.0.0.8334
tripleaeq1.9.0.0.3577
tripleaeq1.9.0.0.1374
tripleaeq1.9.0.0.4108
tripleaeq1.9.0.0.3101
tripleaeq1.9.0.0.5917
tripleaeq1.9.0.0.8076
tripleaeq1.9.0.0.2584

Name	Operator	Version
triplea	eq	1.9.0.0.2801
triplea	eq	1.9.0.0.9717
triplea	eq	1.9.0.0.8334
triplea	eq	1.9.0.0.3577
triplea	eq	1.9.0.0.1374
triplea	eq	1.9.0.0.4108
triplea	eq	1.9.0.0.3101
triplea	eq	1.9.0.0.5917
triplea	eq	1.9.0.0.8076
triplea	eq	1.9.0.0.2584