Описание
UML Designer version <= 8.0.0 contains a XML External Entity (XXE) vulnerability in XML parser for plugins that can result in Disclosure of confidential data, denial of service, SSRF, port scanning. This attack appear to be exploitable via malicious plugins.xml file.
Ссылки
- Issue TrackingThird Party Advisory
- Third Party Advisory
- Issue TrackingThird Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 8.0.0 (включая)
cpe:2.3:a:obeo:uml_designer:*:*:*:*:*:*:*:*
EPSS
Процентиль: 48%
0.00245
Низкий
10 Critical
CVSS3
7.5 High
CVSS2
Дефекты
CWE-611
Связанные уязвимости
CVSS3: 10
github
больше 3 лет назад
UML Designer version <= 8.0.0 contains a XML External Entity (XXE) vulnerability in XML parser for plugins that can result in Disclosure of confidential data, denial of service, SSRF, port scanning. This attack appear to be exploitable via malicious plugins.xml file.
EPSS
Процентиль: 48%
0.00245
Низкий
10 Critical
CVSS3
7.5 High
CVSS2
Дефекты
CWE-611