CVE-2018-17186

2018-11-0620:29:00

Google

osv.dev

0.001 Low

EPSS

Percentile

24.1%

JSON

An administrator with workflow definition entitlements can use DTD to perform malicious operations, including but not limited to file read, file write, and code execution.

CPENameOperatorVersion
syncopeeqsyncope-2.1.2
syncopeeqsyncope-2.0.0
syncopeeqsyncope-2.0.6
syncopeeqsyncope-2.0.5
syncopeeqsyncope-2.0.9
syncopeeqsyncope-2.0.11
syncopeeqsyncope-2.0.4
syncopeeqsyncope-2.0.10
syncopeeqsyncope-2.0.3
syncopeeqsyncope-2.0.8

Name	Operator	Version
syncope	eq	syncope-2.1.2
syncope	eq	syncope-2.0.0
syncope	eq	syncope-2.0.6
syncope	eq	syncope-2.0.5
syncope	eq	syncope-2.0.9
syncope	eq	syncope-2.0.11
syncope	eq	syncope-2.0.4
syncope	eq	syncope-2.0.10
syncope	eq	syncope-2.0.3
syncope	eq	syncope-2.0.8