CVE-2018-1000540

ALTO 7.8CVE-2018-1000540 · Published 26/06/2018 · updated 17/06/2026

En resumen

CVE-2018-1000540 es una vulnerabilidad ALTO (CVSS 7.8) que afecta a loboevolution (loboevolution project).
Probabilidad de explotación en los próximos 30 días (EPSS): 1.2%, mayor que el 68.3% de las vulnerabilidades.
Solución: actualizar a 0.99.3 o posterior.

Package	Affected versions	Patched versions
loboevolution loboevolution_project	`< 0.99.3`	`0.99.3`

Description

LoboEvolution version < 9b75694cedfa4825d4a2330abf2719d470c654cd contains a XML External Entity (XXE) vulnerability in XML Parsing when viewing the XML file in the browser that can result in disclosure of confidential data, denial of service, server side request forgery. This attack appear to be exploitable via Specially crafted XML file.

References

oswetto/LoboEvolution · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free