Critical severity10.0OSV Advisory· Published Aug 20, 2018· Updated Jun 17, 2026
CVE-2018-1000652
CVE-2018-1000652
Description
JabRef version <=4.3.1 contains a XML External Entity (XXE) vulnerability in MsBibImporter XML Parser that can result in disclosure of confidential data, denial of service, server side request forgery, port scanning. This attack appear to be exploitable via Specially crafted MsBib file. This vulnerability appears to have been fixed in after commit 89f855d.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2Patches
Vulnerability mechanics
References
2- 0dd.zone/2018/08/08/JabRef-XXE/nvdThird Party Advisory
- github.com/JabRef/jabref/issues/4229nvdIssue TrackingThird Party Advisory
News mentions
0No linked articles in our index yet.