CVE-2018-1000823

Published December 20th, 2018

View on NVD ↗

CVSS v3

CRITICAL

CVSS v2

7.5

HIGH

Affected

PROJECT

Description

exist version <= 5.0.0-RC4 contains a XML External Entity (XXE) vulnerability in XML Parser for REST Server that can result in Disclosure of confidential data, denial of service, SSRF, port scanning.

eXist-db/exist

eXist Native XML Database and Application Platform

GitHub

467