Xxe

2018-12-2015:29:00

PRIOn knowledge base

www.prio-n.com

9.2 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

57.7%

JSON

UML Designer version <= 8.0.0 contains a XML External Entity (XXE) vulnerability in XML parser for plugins that can result in Disclosure of confidential data, denial of service, SSRF, port scanning. This attack appear to be exploitable via malicious plugins.xml file.

CPENameOperatorVersion
uml_designerle8.0.0

CPE	Name	Operator	Version
	uml_designer	le	8.0.0

References

0dd.zone/2018/10/28/uml-designer-XXE/

github.com/ObeoNetwork/UML-Designer/issues/1035