Lucene search

K
osvGoogleOSV:CVE-2018-20000
HistoryDec 10, 2018 - 2:29 a.m.

CVE-2018-20000

2018-12-1002:29:00
Google
osv.dev
2

AI Score

6.6

Confidence

High

EPSS

0.001

Percentile

50.1%

Apereo Bedework bw-webdav before 4.0.3 allows XXE attacks, as demonstrated by an invite-reply document that reads a local file, related to webdav/servlet/common/MethodBase.java and webdav/servlet/common/PostRequestPars.java.

AI Score

6.6

Confidence

High

EPSS

0.001

Percentile

50.1%

Related for OSV:CVE-2018-20000