cbcvebase.

Bubblesoftapps Bubbleupnp vulnerabilities

1 known vulnerability affecting bubblesoftapps/bubbleupnp.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2018-15506P2CRITICALCVSS 9.8v0.92019-06-19
CVE-2018-15506 [CRITICAL] CWE-611 CVE-2018-15506: In BubbleUPnP 0.9 update 30, the XML parsing engine for SSDP/UPnP functionality is vulnerable to an In BubbleUPnP 0.9 update 30, the XML parsing engine for SSDP/UPnP functionality is vulnerable to an XML External Entity Processing (XXE) attack. Remote, unauthenticated attackers can use this vulnerability to: (1) Access arbitrary files from the filesystem with the same permission as the user account running BubbleUPnP, (2) Initiate SMB connections
nvd
Bubblesoftapps Bubbleupnp vulnerabilities | cvebase