ObeoNetwork/UML-Designer

ObeoNetwork/UML-Designer

GitHubGitHub
GitHubgithub.com
umldesigner.orgumldesigner.org
Releases31
Frequency3 months 3 days
Last Release
Stars328
OpenSource (EPL licensed) UML2 Graphical Modelers (Class, Composite, State, Activity, Sequence ...)
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2018-1000837↗
10 CRITICAL7.5 HIGH

UML Designer version <= 8.0.0 contains a XML External Entity (XXE) vulnerability in XML parser for plugins that can result in Disclosure of confidential data, denial of service, SSRF, port scanning. This attack appear to be exploitable via malicious plugins.xml file.