Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2018-1000838
7.5
HIGHCVSS v2
Published
December 20, 2018
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
autopsy version <= 4.9.0 contains a XML External Entity (XXE) vulnerability in CaseMetadata XML Parser that can result in Disclosure of confidential data, denial of service, SSRF, port scanning. This attack appear to be exploitable via Specially crafted CaseMetadata.
sleuthkit/autopsy
GitHubAutopsy® is a digital forensics platform and graphical interface to The Sleuth Kit® and other digital forensics tools. It can be used by law enforcement, military, and corporate examiners to investigate what happened on a computer. You can even use it to recover photos from your camera's memory card.
GitHubAutopsy® is a digital forensics platform and graphical interface to The Sleuth Kit® and other digital forensics tools. It can be used by law enforcement, military, and corporate examiners to investigate what happened on a computer. You can even use it to recover photos from your camera's memory card. <= 4.9.0NVD