sleuthkit/autopsy

GitHub

github.com

www.sleuthkit.org

Releases114

Frequency1 month 3 weeks

Last Release 29 days ago

Stars3.18K

Autopsy® is a digital forensics platform and graphical interface to The Sleuth Kit® and other digital forensics tools. It can be used by law enforcement, military, and corporate examiners to investigate what happened on a computer. You can even use it to recover photos from your camera's memory card.

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2018-1000838 ↗	Dec 20, 2018Thursday, 20 December 2018, 15:29	—	7.5 HIGH
autopsy version <= 4.9.0 contains a XML External Entity (XXE) vulnerability in CaseMetadata XML Parser that can result in Disclosure of confidential data, denial of service, SSRF, port scanning. This attack appear to be exploitable via Specially crafted CaseMetadata.