CVE-2018-12471

External Entity processing in the RegistrationSharing module

State: Published
Severity: 6.5 Medium
Published: Oct 4, 2018
Updated: Sep 17, 2024
Reserved: Jun 15, 2018

Description

A External Entity Reference ('XXE') vulnerability in SUSE Linux SMT allows remote attackers to read data from the server or cause DoS by referencing blocking elements. Affected releases are SUSE Linux SMT: versions prior to 3.0.37.

Scores

CVSS	Score	Vector	Source
3.0	6.5 Medium	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L	microfocus

Weaknesses

CWE-611 Improper Restriction of XML External Entity Reference ('XXE')

Affected Products

Product	Versions
SMTSUSE Linux	before 3.0.37Affected

References

https://bugzilla.suse.com/show_bug.cgi?id=1103809

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.