Unscored CVE-2018-1000830 EUVD-2018-2022GHSA-gxp6-8fp7-592p

XR3Player version <= V3.124 contains a XML External Entity (XXE) vulnerability in Playlist parser that can result in Disclosure of confiden…

Published Dec 20, 2018 · Updated Sep 17, 2024 · Assigned by mitre

Description

XR3Player version <= V3.124 contains a XML External Entity (XXE) vulnerability in Playlist parser that can result in Disclosure of confidential data, denial of service, SSRF, port scanning.

References

https://github.com/goxr3plus/XR3Player/issues/9
https://0dd.zone/2018/10/28/xr3player-XXE/