Unrated

runelite version

CVE-2018-1000834 First seen on SecPulse Dec 21, 2018

Original description The description as published by the source.

runelite version <= runelite-parent-1.4.23 contains a XML External Entity (XXE) vulnerability in Man in the middle runscape services call that can result in Disclosure of confidential data, denial of service, SSRF, port scanning.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory 0dd.zone
report github.com

Key facts

Severity: Unrated
Published: Dec 21, 2018
First seen on SecPulse: Dec 21, 2018

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:49