critical10.0
CVE-2018-1000823
exist version <= 5.0.0-RC4 contains a XML External Entity (XXE) vulnerability in XML Parser for REST Server that can result in Disclosure of confidential data,…
Impact
exist version <= 5.0.0-RC4 contains a XML External Entity (XXE) vulnerability in XML Parser for REST Server that can result in Disclosure of confidential data, denial of service, SSRF, port scanning.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Exist-Db | Exist | before 5.0.0 Version 5.0.0 |