CyberSec.Space Logo
Back to CVE Browser

CVE-2018-1000542

HIGH
7.8
CVSS Severity Score
EPSS Score0.0390%
EPSS Percentile34.83th
PublishedJun 26, 2018
Last ModifiedNov 21, 2024

Vulnerability Description

netbeans-mmd-plugin version <= 1.4.3 contains a XML External Entity (XXE) vulnerability in MMD file import that can result in Possible information disclosure, server-side request forgery, or remote code execution. This attack appear to be exploitable via Specially crafted MMD file.

Affected Platforms (CPE)

📦
Netbeans Mmd Plugin Project

Netbeans Mmd Plugin

= 1.4.3

References & Advisories

🔗 https://0dd.zone/2018/06/02/Netbeans-MMD-Plugin-XXE/
🔗 https://github.com/raydac/netbeans-mmd-plugin/issues/45
🔗 https://0dd.zone/2018/06/02/Netbeans-MMD-Plugin-XXE/
🔗 https://github.com/raydac/netbeans-mmd-plugin/issues/45

Related Vulnerabilities

CVE-2026-53430

Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in elixir-grpc grpc (GRPC.Compressor.Gzip, GRPC.Mes...

CVE-2026-48854

Allocation of Resources Without Limits or Throttling vulnerability in elixir-grpc grpc allows unauthenticated attackers to exhaust...

CVE-2026-48853

Deserialization of Untrusted Data and Allocation of Resources Without Limits or Throttling vulnerabilities in elixir-grpc grpc all...

CVE-2026-487237.8

The browserstack-cypress-cli is BrowserStack's CLI which allows users to run Cypress tests on BrowserStack. Versions prior to 1.36...