CVE-2018-1000069

MEDIO 5.5CVE-2018-1000069 · Published 13/03/2018 · updated 17/06/2026

In breve

CVE-2018-1000069 è una vulnerabilità MEDIO (CVSS 5.5) che riguarda freeplane (freeplane).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 2.6%, superiore al 85.5% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
freeplane freeplane	`≤ 1.5.9`	No fix yet

Description

FreePlane version 1.5.9 and earlier contains a XML External Entity (XXE) vulnerability in XML Parser in mindmap loader that can result in stealing data from victim's machine. This attack appears to require the victim to open a specially crafted mind map file. This vulnerability appears to have been fixed in 1.6+.

References

lists.debian.org/debian-lts-announce/2018/03/msg00019.html · Mailing List
debian.org/security/2018/dsa-4175 · Third Party Advisory
freeplane.org/wiki/index.php/XML_External_Entity_vulnerability_in_map_parser · Vendor Advisory
youtube.com/watch · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free