Xxe

2018-12-2015:29:00

PRIOn knowledge base

www.prio-n.com

8.9 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

52.9%

JSON

runelite version <= runelite-parent-1.4.23 contains a XML External Entity (XXE) vulnerability in Man in the middle runscape services call that can result in Disclosure of confidential data, denial of service, SSRF, port scanning.

CPENameOperatorVersion
runelitele1.4.23

CPE	Name	Operator	Version
	runelite	le	1.4.23

References

0dd.zone/2018/10/28/runelite-XXE-MitM/

github.com/runelite/runelite/issues/6160