VYPR
← All advisories
Unrated severityOSV Advisory· Published Jun 26, 2018· Updated Aug 5, 2024

CVE-2018-1000548

CVE-2018-1000548

Description

Umlet version < 14.3 contains a XML External Entity (XXE) vulnerability in File parsing that can result in disclosure of confidential data, denial of service, server side request forgery. This attack appear to be exploitable via Specially crafted UXF file. This vulnerability appears to have been fixed in 14.3.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Umlet/UmletOSV2 versions
    2015-07-01_UMLet_v14.0, 2016-04-03_UMLet_v14.2+ 1 more
    • (no CPE)range: 2015-07-01_UMLet_v14.0, 2016-04-03_UMLet_v14.2
    • (no CPE)range: <14.3

Patches

Vulnerability mechanics

No source-code context for this CVE — mechanics is only generated when we can read the actual fix diff. Without that, the four sections (root cause, attack vector, affected code, fix) would be speculation rather than analysis.

References

2

News mentions

0

No linked articles in our index yet.