Skip to main content

Bittorrent Client

1 CVEs product

Monthly

CVE-2018-13417 Aug 13, 17:29 CRITICAL POC THREAT Act Now

In Vuze Bittorrent Client 5.7.6.0, the XML parsing engine for SSDP/UPnP functionality is vulnerable to an XML External Entity Processing (XXE) attack. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

XXE Microsoft Vuze Bittorrent Client
NVD Exploit-DB
CVSS 3.0
9.8
EPSS
20.7%
EPSS 21% CVSS 9.8
CRITICAL POC THREAT Act Now

In Vuze Bittorrent Client 5.7.6.0, the XML parsing engine for SSDP/UPnP functionality is vulnerable to an XML External Entity Processing (XXE) attack. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

XXE Microsoft Vuze +1
NVD Exploit-DB

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy