CVE-2018-1000889

CVE-2018-1000889 affects Logisim Evolution versions 2.14.3 and earlier, due to an XML External Entity (XXE) vulnerability in the circuit file loading path (loadXmlFrom in XmlReader.java). The issue can lead to information disclosure and, depending on system configuration, potential remote code ex...