CRITICAL🇵🇱 Wersja polska

CVE-2018-1000831

CVSS 10.0v3.0pub. 2018-12-20upd. 2024-11-21

K9Mail version <= v5.600 contains a XML External Entity (XXE) vulnerability in WebDAV response parser that can result in Disclosure of confidential data, denial of service, SSRF, port scanning. This attack appear to be exploitable via malicious WebDAV server or intercept the reponse of a valid WebDAV server.

CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

  • K9mail K 9 Mail

    APP
    K9Mail
    ≤ 5.600
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
SSRFDoSXXE
CWE
References