Lucene search
+L

1 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/12/20 12:00 a.m.•4 views

CVE-2018-1000838: Improper Restriction of XML External Entity Reference

autopsy version = 4.9.0 contains a XML External Entity XXE vulnerability in CaseMetadata XML Parser that can result in Disclosure of confidential data, denial of service, SSRF, port scanning. This attack appear to be exploitable via Specially crafted CaseMetadata...

10CVSS5.7AI score0.02502EPSS
SaveExploits0References2
Rows per page
Query Builder