CVE-2018-1000821

MicroMathematics version before commit 5c05ac8 contains a XML External Entity XXE vulnerability in SMathStudio files that can result in Disclosure of confidential data, denial of service, SSRF, port scanning. This attack appear to be exploitable via Specially crafted SMathStudio files. This...

CVE-2018-1000821

CVE-2018-1000821 concerns MicroMathematics prior to commit 5c05ac8, where an XML External Entity (XXE) vulnerability exists in SMathStudio files. The root cause is XXE processing within these files, allowing attackers to cause confidential data disclosure, denial of service, SSRF, and port scanni...