CVE-2018-1000889

Logisim Evolution version 2.14.3 and earlier contains an XML External Entity XXE vulnerability in Circuit file loading functionality loadXmlFrom in src/com/cburch/logisim/file/XmlReader.java that can result in information leak, possible RCE depending on system configuration. This attack appears t...

PT-2018-9604

Name of the Vulnerable Software and Affected Versions: Logisim Evolution versions prior to 2.14.4 Description: The issue is related to an XML External Entity XXE vulnerability in the Circuit file loading functionality, specifically in the loadXmlFrom function within...

CVE-2018-1000889: Improper Restriction of XML External Entity Reference

Logisim Evolution version 2.14.3 and earlier contains an XML External Entity XXE vulnerability in Circuit file loading functionality loadXmlFrom in src/com/cburch/logisim/file/XmlReader.java that can result in information leak, possible RCE depending on system configuration. This attack appears t...