CyberSec.Space Logo
返回 CVE 浏览器

CVE-2018-1000644

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.1240%
EPSS Percentile35.80th
Published2018年8月20日
Last Modified2024年11月21日

Vulnerability Description

Eclipse RDF4j version < 2.4.0 Milestone 2 contains a XML External Entity (XXE) vulnerability in RDF4j XML parser parsing RDF files that can result in the disclosure of confidential data, denial of service, server side request forgery, port scanning. This attack appear to be exploitable via Specially crafted RDF file.

Affected Platforms (CPE)

📦
Eclipse

Rdf4j

< 2.4.0
📦
Eclipse

Rdf4j

= 2.4.0
📦
Eclipse

Rdf4j

= 2.4.0
📦
Eclipse

Rdf4j

= 2.4.0

References & Advisories

🔗 https://0dd.zone/2018/08/05/rdf4j-XXE/
🔗 https://github.com/eclipse/rdf4j/issues/1056
🔗 https://0dd.zone/2018/08/05/rdf4j-XXE/
🔗 https://github.com/eclipse/rdf4j/issues/1056

相关漏洞威胁

CVE-2018-202277.5

RDF4J 2.4.2 allows Directory Traversal via ../ in an entry in a ZIP archive.

CVE-2018-010110.0

A vulnerability in the Secure Sockets Layer (SSL) VPN functionality of the Cisco Adaptive Security Appliance (ASA) Software could ...

CVE-2018-487210.0

An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006...

CVE-2018-409110.0

An issue was discovered in certain Apple products. macOS before 10.13.3 is affected. The issue involves the "Sandbox" component. I...