Xxe

2018-12-2015:29:00

PRIOn knowledge base

www.prio-n.com

9.3 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

57.9%

JSON

XR3Player version <= V3.124 contains a XML External Entity (XXE) vulnerability in Playlist parser that can result in Disclosure of confidential data, denial of service, SSRF, port scanning.

CPENameOperatorVersion
xr3playerle3.124

CPE	Name	Operator	Version
	xr3player	le	3.124

References

0dd.zone/2018/10/28/xr3player-XXE/

github.com/goxr3plus/XR3Player/issues/9