CVE-2018-1000831

K9Mail version

Original description

The description as published by the source.

K9Mail version <= v5.600 contains a XML External Entity (XXE) vulnerability in WebDAV response parser that can result in Disclosure of confidential data, denial of service, SSRF, port scanning. This attack appear to be exploitable via malicious WebDAV server or intercept the reponse of a valid WebDAV server.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory 0dd.zone
report github.com