CVE-2018-1000830

2018-12-2015:29:01

Google

osv.dev

7 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

57.9%

JSON

XR3Player version <= V3.124 contains a XML External Entity (XXE) vulnerability in Playlist parser that can result in Disclosure of confidential data, denial of service, SSRF, port scanning.

CPENameOperatorVersion
xr3playereqV3.67
xr3playereqV3.122
xr3playereqV3.105
xr3playereqV3.68
xr3playereqV3.48
xr3playereqV3.53
xr3playereqV3.86
xr3playereqV3.108
xr3playereqV3.83
xr3playereqV3.77

Name	Operator	Version
xr3player	eq	V3.67
xr3player	eq	V3.122
xr3player	eq	V3.105
xr3player	eq	V3.68
xr3player	eq	V3.48
xr3player	eq	V3.53
xr3player	eq	V3.86
xr3player	eq	V3.108
xr3player	eq	V3.83
xr3player	eq	V3.77