CVE-2018-13140

The CVE-2018-13140 entry concerns Druide Antidote (up to version 9.5.1) on Windows and Linux. Affected code is the update mechanism that downloads installation packages over HTTP. The underlying flaw enables remote code execution when an attacker can manipulate or intercept the HTTP update flow, ...