Xxe

2018-12-2015:29:00

PRIOn knowledge base

www.prio-n.com

AI Score

8.9

Confidence

High

EPSS

0.002

Percentile

52.9%

JSON

runelite version <= runelite-parent-1.4.23 contains a XML External Entity (XXE) vulnerability in Man in the middle runscape services call that can result in Disclosure of confidential data, denial of service, SSRF, port scanning.

References

0dd.zone/2018/10/28/runelite-XXE-MitM/

github.com/runelite/runelite/issues/6160