CVE-2018-1000540

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2018-1000540
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-1000540.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2018-1000540
Published
2018-06-26T16:29:02Z
Modified
2026-10-24T10:50:31Z
Severity
  • 7.8 (High) CVSS_V3 - CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

LoboEvolution version < 9b75694cedfa4825d4a2330abf2719d470c654cd contains a XML External Entity (XXE) vulnerability in XML Parsing when viewing the XML file in the browser that can result in disclosure of confidential data, denial of service, server side request forgery. This attack appear to be exploitable via Specially crafted XML file.

Database specific 
{
    "unresolved_ranges": [
        {
            "cpes": [
                "cpe:2.3:a:loboevolution_project:loboevolution:*:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "range": [
                        {
                            "fixed": "0.99.3"
                        }
                    ],
                    "source": "CPE_RANGE"
                }
            ],
            "vendor_product": "loboevolution_project:loboevolution"
        }
    ]
}
References

Affected packages

Git / github.com/oswetto/loboevolution

Affected ranges

Type
GIT
Repo
https://github.com/oswetto/loboevolution
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last Affected
9b75694cedfa4825d4a2330abf2719d470c654cd
Database specific
Show details 
{
    "extracted_events": [
        {
            "range": [
                {
                    "introduced": "0"
                },
                {
                    "last_affected": "9b75694cedfa4825d4a2330abf2719d470c654cd"
                }
            ],
            "source": "DESCRIPTION"
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-1000540.json"