VYPR
← All advisories
High severity7.8OSV Advisory· Published Jun 26, 2018· Updated Jun 17, 2026

CVE-2018-1000548

CVE-2018-1000548

Description

Umlet version < 14.3 contains a XML External Entity (XXE) vulnerability in File parsing that can result in disclosure of confidential data, denial of service, server side request forgery. This attack appear to be exploitable via Specially crafted UXF file. This vulnerability appears to have been fixed in 14.3.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Umlet/Umletllm-fuzzy3 versions
    <14.3+ 2 more
    • (no CPE)range: <14.3
    • (no CPE)range: 2015-07-01_UMLet_v14.0, 2016-04-03_UMLet_v14.2
    • cpe:2.3:a:umlet:umlet:*:*:*:*:*:*:*:*range: <14.3

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.