CVE-2018-1000840

Processing Foundation Processing version 3.4 and earlier contains a XML External Entity (XXE) vulnerability in loadXML() function that can result in An…

published December 20, 2018

CVSS
—
EPSS
2%
Percentile
82.2
In the wild
Unconfirmed
What it is

Processing Foundation Processing version 3.4 and earlier contains a XML External Entity (XXE) vulnerability in loadXML() function that can result in An attacker can read arbitrary files and exfiltrate their contents via HTTP requests. This attack appear to be exploitable via The victim must use Processing to parse a crafted XML document.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02177 · 82.2th percentile
Published
2018-12-20T15:00Z
EPSS history
Timeline
  • 20 DEC 15:00Z
    Processing Foundation Processing version 3.4 and earlier contains a XML External Entity (XXE) vulnerability in loadXML() function that can result in An…
    cvelistv5