CVE-2018-1000542

HIGH

7.8

CVSS Severity Score

EPSS Score0.0390%

EPSS Percentile34.83th

Published2018年6月26日

Last Modified2024年11月21日

Vulnerability Description

netbeans-mmd-plugin version <= 1.4.3 contains a XML External Entity (XXE) vulnerability in MMD file import that can result in Possible information disclosure, server-side request forgery, or remote code execution. This attack appear to be exploitable via Specially crafted MMD file.

Affected Platforms (CPE)

📦

Netbeans Mmd Plugin Project

Netbeans Mmd Plugin

= 1.4.3

References & Advisories

🔗 https://0dd.zone/2018/06/02/Netbeans-MMD-Plugin-XXE/

🔗 https://github.com/raydac/netbeans-mmd-plugin/issues/45