PT-2018-18864

CVE-2018-9116

·

Published

2018-03-29

·

Updated

2019-02-27

Description by

CVSS 3.1
9.1
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Name of the Vulnerable Software and Affected Versions WireMock versions prior to 2.16.0
Description The issue allows a remote unauthenticated attacker to access local files and internal resources, potentially causing a Denial of Service due to an XXE vulnerability.
Recommendations For versions prior to 2.16.0, update to version 2.16.0 or later to resolve the issue.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-611: Improper Restriction of XML External Entity Reference
Related identifiers
CVE-2018-9116
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com