PT-2018-9545
CVE-2018-1000821
·
تاريخ النشر
2018-12-20
·
تاريخ التحديث
2019-01-08
الوصف من
CVSS 3.1
10
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
MicroMathematics versions prior to commit 5c05ac8
Description
The issue concerns a XML External Entity (XXE) vulnerability in SMathStudio files, which can lead to the disclosure of confidential data, denial of service, Server-Side Request Forgery (SSRF), and port scanning. This can be exploited through specially crafted SMathStudio files.
Recommendations
For versions prior to commit 5c05ac8, update to a version after commit 5c05ac8 to resolve the issue. As a temporary workaround, consider restricting the use of SMathStudio files until the update is applied.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾