CVE-2018-1000548

HIGH 7.8CVE-2018-1000548 · Published 26/06/2018 · updated 17/06/2026

In short

CVE-2018-1000548 is a HIGH (CVSS 7.8) vulnerability affecting umlet (umlet).
Chance of exploitation in the next 30 days (EPSS): 1.3%, higher than 70.6% of all vulnerabilities.
Fix: update to 14.3 or later.

Package	Affected versions	Patched versions
umlet umlet	`< 14.3`	`14.3`

Description

Umlet version < 14.3 contains a XML External Entity (XXE) vulnerability in File parsing that can result in disclosure of confidential data, denial of service, server side request forgery. This attack appear to be exploitable via Specially crafted UXF file. This vulnerability appears to have been fixed in 14.3.

References

0dd.zone/2018/04/23/UMLet-XXE · Exploit
umlet/umlet · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free