CVE-2018-1000836
1 advisory.
Maven/org.bedework.caleng:bw-calendar-engine CVE-2018-1000836: critical 9
XML External Entity (XXE) vulnerability in bw-calendar-engine
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 3.12.2 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-xmvg-w4f9-99r7
- https://nvd.nist.gov/vuln/detail/CVE-2018-1000836
- https://github.com/Bedework/bw-calendar-engine/issues/3
- https://0dd.zone/2018/10/28/bw-calendar-engine-XXE-MitM
- https://github.com/Bedework/bw-calendar-engine
- https://github.com/advisories/GHSA-xmvg-w4f9-99r7
CVE-2018-1000836 · published · modified · JSON