CyberSec.Space Logo
Back to CVE Browser

CVE-2018-1000821

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.1990%
EPSS Percentile19.24th
PublishedDec 20, 2018
Last ModifiedNov 21, 2024

Vulnerability Description

MicroMathematics version before commit 5c05ac8 contains a XML External Entity (XXE) vulnerability in SMathStudio files that can result in Disclosure of confidential data, denial of service, SSRF, port scanning. This attack appear to be exploitable via Specially crafted SMathStudio files. This vulnerability appears to have been fixed in after commit 5c05ac8.

Affected Platforms (CPE)

📦
Micromathematics Project

Micromathematics

< 2.17.3

References & Advisories

🔗 https://0dd.zone/2018/10/27/micromathematics-XXE/
🔗 https://github.com/mkulesh/microMathematics/issues/79
🔗 https://0dd.zone/2018/10/27/micromathematics-XXE/
🔗 https://github.com/mkulesh/microMathematics/issues/79

Related Vulnerabilities

CVE-2018-010110.0

A vulnerability in the Secure Sockets Layer (SSL) VPN functionality of the Cisco Adaptive Security Appliance (ASA) Software could ...

CVE-2018-487210.0

An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006...

CVE-2018-261110.0

Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: Core Service...

CVE-2018-100012410.0

I Librarian I-librarian version 4.8 and earlier contains a XML External Entity (XXE) vulnerability in line 154 of importmetadata.p...