Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2018-12471

External Entity processing in the RegistrationSharing module

Description

A External Entity Reference ('XXE') vulnerability in SUSE Linux SMT allows remote attackers to read data from the server or cause DoS by referencing blocking elements. Affected releases are SUSE Linux SMT: versions prior to 3.0.37.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SUSE Linux SMT

  • unspecified to < 3.0.37affected

References