Critical severity9.0NVD Advisory· Published Dec 20, 2018· Updated Jun 17, 2026

CVE-2018-1000829

Description

Anyplace version before commit 80359b4 contains a XML External Entity (XXE) vulnerability in Man in the middle on map API call that can result in Disclosure of confidential data, denial of service, SSRF, port scanning. This vulnerability appears to have been fixed in after commit 80359b4.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Domsvoid/Anyplaceinferred
Dmsl/anyplacellm-create
Range: < 80359b4
Survey Anyplace/Survey Anyplacellm-fuzzy
Range: < 80359b4

Patches

Vulnerability mechanics

References

0dd.zone/2018/10/28/anyplace-XXE-MitM/nvdThird Party Advisory
github.com/dmsl/anyplace/issues/263nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.585
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000