CVE-2018-1000828 (GCVE-0-2018-1000828)
Vulnerability from cvelistv5 – Published: 2018-12-20 15:00 – Updated: 2024-09-17 01:57
VLAI
EPSS
VEX
Summary
FrostWire version <= frostwire-desktop-6.7.4-build-272 contains a XML External Entity (XXE) vulnerability in Man in the middle on update that can result in Disclosure of confidential data, denial of service, SSRF, port scanning. This attack appear to be exploitable via Man in the middle the call to update the software.
Severity
9.0 (Critical)
CWE
- n/a
Assigner
References
2 references
| URL | Tags |
|---|---|
| https://0dd.zone/2018/10/28/frostwire-XXE-MitM/ | x_refsource_MISC |
| https://github.com/frostwire/frostwire/issues/829 | x_refsource_MISC |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T12:47:57.149Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://0dd.zone/2018/10/28/frostwire-XXE-MitM/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/frostwire/frostwire/issues/829"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"dateAssigned": "2018-11-27T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "FrostWire version \u003c= frostwire-desktop-6.7.4-build-272 contains a XML External Entity (XXE) vulnerability in Man in the middle on update that can result in Disclosure of confidential data, denial of service, SSRF, port scanning. This attack appear to be exploitable via Man in the middle the call to update the software."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-12-20T15:00:00.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://0dd.zone/2018/10/28/frostwire-XXE-MitM/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/frostwire/frostwire/issues/829"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"DATE_ASSIGNED": "2018-11-27T13:54:33.464913",
"DATE_REQUESTED": "2018-10-28T03:59:08",
"ID": "CVE-2018-1000828",
"REQUESTER": "sajeeb@0dd.zone",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "FrostWire version \u003c= frostwire-desktop-6.7.4-build-272 contains a XML External Entity (XXE) vulnerability in Man in the middle on update that can result in Disclosure of confidential data, denial of service, SSRF, port scanning. This attack appear to be exploitable via Man in the middle the call to update the software."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://0dd.zone/2018/10/28/frostwire-XXE-MitM/",
"refsource": "MISC",
"url": "https://0dd.zone/2018/10/28/frostwire-XXE-MitM/"
},
{
"name": "https://github.com/frostwire/frostwire/issues/829",
"refsource": "MISC",
"url": "https://github.com/frostwire/frostwire/issues/829"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2018-1000828",
"datePublished": "2018-12-20T15:00:00.000Z",
"dateReserved": "2018-12-20T00:00:00.000Z",
"dateUpdated": "2024-09-17T01:57:06.254Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2018-1000828",
"date": "2026-07-23",
"epss": "0.01333",
"percentile": "0.68156"
},
"fkie_nvd": {
"configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:frostwire:frostwire:1.9.9:build246:*:*:*:desktop:*:*\", \"matchCriteriaId\": \"4E95E0EA-7F5F-43B7-BE1B-E2AB7907455F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:frostwire:frostwire:1.9.9:build247:*:*:*:desktop:*:*\", \"matchCriteriaId\": \"0AA38B2E-78AC-471D-94DC-4C6ECA82DC92\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:frostwire:frostwire:2.0.7:build263:*:*:*:desktop:*:*\", \"matchCriteriaId\": \"C486DDC6-45F0-454E-AAC8-810624DB73C6\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:frostwire:frostwire:6.1.6:build166:*:*:*:desktop:*:*\", \"matchCriteriaId\": \"96E555C6-DC2B-4F2E-9856-BBF30788F723\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:frostwire:frostwire:6.1.6:build167:*:*:*:desktop:*:*\", \"matchCriteriaId\": \"0132EF81-818F-480F-BC36-51923728B0A5\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:frostwire:frostwire:6.1.7:build168:*:*:*:desktop:*:*\", \"matchCriteriaId\": \"1495B24D-E5E8-42D2-ABA3-6F4917337C9F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:frostwire:frostwire:6.1.8:build169:*:*:*:desktop:*:*\", \"matchCriteriaId\": \"97C1475A-7F88-40D2-973E-145B32B726D0\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:frostwire:frostwire:6.1.9:build172:*:*:*:desktop:*:*\", \"matchCriteriaId\": \"8A6FF2BB-FE03-4AF4-96E0-3BA5C33DFC51\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:frostwire:frostwire:6.2.0:build173:*:*:*:desktop:*:*\", \"matchCriteriaId\": \"CE90F675-07E4-4CAD-AB19-8986F2E4713F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:frostwire:frostwire:6.2.0:build174:*:*:*:desktop:*:*\", \"matchCriteriaId\": \"C9FAC4E2-87D5-4AAC-B6A3-9A37CED30C25\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:frostwire:frostwire:6.2.1:build175:*:*:*:desktop:*:*\", \"matchCriteriaId\": \"AB669275-0836-48F9-A74D-FFC4A5E59485\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:frostwire:frostwire:6.2.2:build176:*:*:*:desktop:*:*\", \"matchCriteriaId\": \"FF02652D-4BE6-4FA2-9117-154888570B32\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:frostwire:frostwire:6.2.3:build177:*:*:*:desktop:*:*\", \"matchCriteriaId\": \"4BA148E5-209A-42EF-A723-C054AA8927FC\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:frostwire:frostwire:6.2.3:build178:*:*:*:desktop:*:*\", \"matchCriteriaId\": \"1B6ACE52-5373-4EE7-ACA7-925902434CC6\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:frostwire:frostwire:6.2.4:build179:*:*:*:desktop:*:*\", \"matchCriteriaId\": \"2428B046-09A4-49FF-80C2-DAFB54BD050D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:frostwire:frostwire:6.3.0:build180:*:*:*:desktop:*:*\", \"matchCriteriaId\": \"244B2B80-43DE-4799-864A-E1677F39C514\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:frostwire:frostwire:6.3.0:build181:*:*:*:desktop:*:*\", \"matchCriteriaId\": \"DA70A608-C3B4-4C4F-823E-B6EEEFD46C2C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:frostwire:frostwire:6.3.0:build182:*:*:*:desktop:*:*\", \"matchCriteriaId\": \"D3A162B3-6A3F-479D-99B1-4B3DCF74A5CE\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:frostwire:frostwire:6.3.0:build183:*:*:*:desktop:*:*\", \"matchCriteriaId\": \"BDAF2AFD-8616-41FE-844B-40537A44B96B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:frostwire:frostwire:6.3.0:build184:*:*:*:desktop:*:*\", \"matchCriteriaId\": \"61EEDE0E-E1CF-4F06-9DE8-E5063FBE57AC\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:frostwire:frostwire:6.3.0:build185:*:*:*:desktop:*:*\", \"matchCriteriaId\": \"12820242-D622-49F1-BD41-77D9991634F4\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:frostwire:frostwire:6.3.1:build186:*:*:*:desktop:*:*\", \"matchCriteriaId\": \"CB3F79B1-A811-44F1-B892-6B5DAC65CCAB\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:frostwire:frostwire:6.3.2:build187:*:*:*:desktop:*:*\", \"matchCriteriaId\": \"CF1ADD60-4792-4CC5-A8DC-AB82047EF5EC\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:frostwire:frostwire:6.3.2:build188:*:*:*:desktop:*:*\", \"matchCriteriaId\": \"A1C3ABAC-84D6-4260-96AE-841FCF0ADF20\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:frostwire:frostwire:6.3.3:build189:*:*:*:desktop:*:*\", \"matchCriteriaId\": \"147D0437-6534-4400-A4B1-4BEC9CD0E79F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:frostwire:frostwire:6.3.3:build190:*:*:*:desktop:*:*\", \"matchCriteriaId\": \"10D3A6E2-8C61-4941-A94D-CB025D5511CF\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:frostwire:frostwire:6.3.3:build193:*:*:*:desktop:*:*\", \"matchCriteriaId\": \"94511687-D237-497E-8B26-79E80D3C6ACB\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:frostwire:frostwire:6.3.3:build255:*:*:*:desktop:*:*\", \"matchCriteriaId\": \"FDE462AA-41A2-4BC5-897F-B013D64C001B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:frostwire:frostwire:6.3.4:build193:*:*:*:desktop:*:*\", \"matchCriteriaId\": \"232BFF4C-0D70-402D-AE8E-4645C142C503\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:frostwire:frostwire:6.3.4:build194:*:*:*:desktop:*:*\", \"matchCriteriaId\": \"A96B3160-D50B-414F-A446-AD0DB1D0B2FA\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:frostwire:frostwire:6.3.5:build195:*:*:*:desktop:*:*\", \"matchCriteriaId\": \"6A6A5BE2-9293-4F3D-8297-CF7D9DCF178D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:frostwire:frostwire:6.3.5:build197:*:*:*:desktop:*:*\", \"matchCriteriaId\": \"C49442FC-5201-4D13-9022-AFD2D27BB480\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:frostwire:frostwire:6.3.5:build198:*:*:*:desktop:*:*\", \"matchCriteriaId\": \"DE9C2B90-435D-4506-91D8-A7E1DEC05775\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:frostwire:frostwire:6.3.6:build201:*:*:*:desktop:*:*\", \"matchCriteriaId\": \"0DEF48EB-EF46-42F6-9B93-84A346508251\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:frostwire:frostwire:6.3.6:build202:*:*:*:desktop:*:*\", \"matchCriteriaId\": \"8D8FB038-5DE4-42E1-9D23-DF14D9A35625\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:frostwire:frostwire:6.3.7:build203:*:*:*:desktop:*:*\", \"matchCriteriaId\": \"F698AC23-AB78-4B97-97C3-ED005F626C67\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:frostwire:frostwire:6.3.7:build204:*:*:*:desktop:*:*\", \"matchCriteriaId\": \"5CF77E33-22BC-433B-B8CE-D684189387CA\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:frostwire:frostwire:6.3.7:build205:*:*:*:desktop:*:*\", \"matchCriteriaId\": \"7563D5A0-35D2-453E-B0C4-94BC6DBDBBB2\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:frostwire:frostwire:6.3.7:build206:*:*:*:desktop:*:*\", \"matchCriteriaId\": \"F92400DF-A496-4BC9-8303-942F799463BF\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:frostwire:frostwire:6.4.0:build207:*:*:*:desktop:*:*\", \"matchCriteriaId\": \"84BD1753-CFB2-4552-966D-65B9E467FAB5\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:frostwire:frostwire:6.4.0:build208:*:*:*:desktop:*:*\", \"matchCriteriaId\": \"F4CCE584-55F0-45CE-ADC0-3B764E2E69B8\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:frostwire:frostwire:6.4.1:build209:*:*:*:desktop:*:*\", \"matchCriteriaId\": \"35225390-F59F-40E1-B491-47501ACE2A92\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:frostwire:frostwire:6.4.1:build210:*:*:*:desktop:*:*\", \"matchCriteriaId\": \"0866BDCE-D7A1-467F-8864-A02C96B539E6\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:frostwire:frostwire:6.4.2:build212:*:*:*:desktop:*:*\", \"matchCriteriaId\": \"8BE43E96-49F7-414B-87ED-B4BA28172154\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:frostwire:frostwire:6.4.3:build214:*:*:*:desktop:*:*\", \"matchCriteriaId\": \"5BFC12DE-9570-4090-92BF-4DDD8E860A55\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:frostwire:frostwire:6.4.4:build215:*:*:*:desktop:*:*\", \"matchCriteriaId\": \"7549971B-C972-4B96-8455-7D5C570B7005\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:frostwire:frostwire:6.4.5:build218:*:*:*:desktop:*:*\", \"matchCriteriaId\": \"C3737065-1FE8-4CBE-BA54-5BF3C4798CD2\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:frostwire:frostwire:6.4.5:build219:*:*:*:desktop:*:*\", \"matchCriteriaId\": \"CEA2A8AA-FEDE-4EF9-9445-2A1F739B50C2\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:frostwire:frostwire:6.4.5:build220:*:*:*:desktop:*:*\", \"matchCriteriaId\": \"9400DE0C-BE29-4BB5-AB64-91C720A3E9B0\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:frostwire:frostwire:6.4.5:build221:*:*:*:desktop:*:*\", \"matchCriteriaId\": \"386EF955-2F9A-42EA-BD72-79736A2BF466\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:frostwire:frostwire:6.4.5:build222:*:*:*:desktop:*:*\", \"matchCriteriaId\": \"57A1D356-9D1A-4605-A5E9-2C8CE13A4537\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:frostwire:frostwire:6.4.6:build223:*:*:*:desktop:*:*\", \"matchCriteriaId\": \"EC0A0D7E-CA6B-464C-9372-F4E4505BEE19\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:frostwire:frostwire:6.4.6:build227:*:*:*:desktop:*:*\", \"matchCriteriaId\": \"C1040EA6-6BAE-4570-B483-15D97BA8DF78\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:frostwire:frostwire:6.4.7:build228:*:*:*:desktop:*:*\", \"matchCriteriaId\": \"701FEDD5-7407-4C6D-9802-F1ABCAC48B9F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:frostwire:frostwire:6.4.7:build229:*:*:*:desktop:*:*\", \"matchCriteriaId\": \"FDCF12B9-25C6-4370-990E-2799DB5EABF8\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:frostwire:frostwire:6.4.8:build230:*:*:*:desktop:*:*\", \"matchCriteriaId\": \"A4356B54-6472-4E45-91A3-F02F3A40975D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:frostwire:frostwire:6.4.8:build232:*:*:*:desktop:*:*\", \"matchCriteriaId\": \"E6296443-EB65-4284-87B6-FF5E88E2AB88\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:frostwire:frostwire:6.4.8:build233:*:*:*:desktop:*:*\", \"matchCriteriaId\": \"B1AC7EEE-63DF-4562-9BF0-A47F892112F9\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:frostwire:frostwire:6.4.8:build234:*:*:*:desktop:*:*\", \"matchCriteriaId\": \"21CEC55B-4970-4BDB-BCAD-7F3CAFF55764\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:frostwire:frostwire:6.4.9:build235:*:*:*:desktop:*:*\", \"matchCriteriaId\": \"63076BE3-277C-4E58-AE8C-BAE2DFE70E39\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:frostwire:frostwire:6.5.0:build236:*:*:*:desktop:*:*\", \"matchCriteriaId\": \"F5E96164-6326-44D2-8F36-B2715BC62749\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:frostwire:frostwire:6.5.1:build238:*:*:*:desktop:*:*\", \"matchCriteriaId\": \"A868DD7E-E457-4C36-B851-E8276C3119CD\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:frostwire:frostwire:6.5.2:build239:*:*:*:desktop:*:*\", \"matchCriteriaId\": \"E4D6B7ED-7BFD-4322-9378-935DAA0D9577\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:frostwire:frostwire:6.5.3:build240:*:*:*:desktop:*:*\", \"matchCriteriaId\": \"C4EFFE22-22C5-461E-ADD1-78D0A043AC81\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:frostwire:frostwire:6.5.4:build241:*:*:*:desktop:*:*\", \"matchCriteriaId\": \"A895ADA4-F589-4E41-8392-A5FC056FE9BC\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:frostwire:frostwire:6.5.5:build242:*:*:*:desktop:*:*\", \"matchCriteriaId\": \"A1FA458E-DACD-404A-B040-3E09B52CF677\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:frostwire:frostwire:6.5.5:build243:*:*:*:desktop:*:*\", \"matchCriteriaId\": \"E515F51E-9B8F-47D1-8029-187F743E2FDC\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:frostwire:frostwire:6.5.8:build244:*:*:*:desktop:*:*\", \"matchCriteriaId\": \"52674DBB-21F5-47E4-9406-B80CCA2AE023\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:frostwire:frostwire:6.5.8:build245:*:*:*:desktop:*:*\", \"matchCriteriaId\": \"5747F8E5-EA6D-47A7-9930-0D597765B3C0\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:frostwire:frostwire:6.5.9:build246:*:*:*:desktop:*:*\", \"matchCriteriaId\": \"7E96023E-F6FE-41E0-886F-FC24209E2DD1\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:frostwire:frostwire:6.6.0:build248:*:*:*:desktop:*:*\", \"matchCriteriaId\": \"4611DF07-416F-4C03-97FC-5673522667EF\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:frostwire:frostwire:6.6.1:build249:*:*:*:desktop:*:*\", \"matchCriteriaId\": \"E7F1C38C-F67A-4CB8-ADF0-7EA14B26F6D9\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:frostwire:frostwire:6.6.2:build250:*:*:*:desktop:*:*\", \"matchCriteriaId\": \"2958AD44-2388-4C07-80AC-426D639C9953\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:frostwire:frostwire:6.6.2:build251:*:*:*:desktop:*:*\", \"matchCriteriaId\": \"139D0C13-1325-4E2F-B8EB-8261066548BB\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:frostwire:frostwire:6.6.3:build252:*:*:*:desktop:*:*\", \"matchCriteriaId\": \"297375AD-4140-4504-B9D7-3BCDD3BF4986\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:frostwire:frostwire:6.6.3:build253:*:*:*:desktop:*:*\", \"matchCriteriaId\": \"C08F2D26-AE23-4CA1-9EA9-EC82FC8B001E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:frostwire:frostwire:6.6.4:build256:*:*:*:desktop:*:*\", \"matchCriteriaId\": \"538E483B-8A9E-4B3C-8D78-502656C29A3D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:frostwire:frostwire:6.6.5:build257:*:*:*:desktop:*:*\", \"matchCriteriaId\": \"07053E7A-6D11-4568-AFBE-EAA343EE9A06\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:frostwire:frostwire:6.6.6:build258:*:*:*:desktop:*:*\", \"matchCriteriaId\": \"23CEE5E2-6F93-4688-8C62-E4F31F118DB2\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:frostwire:frostwire:6.6.7:build529:*:*:*:desktop:*:*\", \"matchCriteriaId\": \"569DC93E-D759-4861-BE9E-0F8AD3399A73\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:frostwire:frostwire:6.6.8:build260:*:*:*:desktop:*:*\", \"matchCriteriaId\": \"41C6B5E5-F11A-4F58-BA53-EF488EABA454\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:frostwire:frostwire:6.7.0:build261:*:*:*:desktop:*:*\", \"matchCriteriaId\": \"82CF7542-D0EB-44E4-AD4C-6CE303CA1375\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:frostwire:frostwire:6.7.0:build262:*:*:*:desktop:*:*\", \"matchCriteriaId\": \"B58AADCC-CD14-46AB-AD56-99443B0800EB\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:frostwire:frostwire:6.7.0:build264:*:*:*:desktop:*:*\", \"matchCriteriaId\": \"DCF68BCA-710F-4342-B4DE-8E58EB83C15E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:frostwire:frostwire:6.7.0:build265hotfix:*:*:*:desktop:*:*\", \"matchCriteriaId\": \"68042A96-F268-47B3-9CDE-4EF2757AB912\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:frostwire:frostwire:6.7.1:build266:*:*:*:desktop:*:*\", \"matchCriteriaId\": \"6DA329F1-B718-4E42-AF02-C057EAB7C240\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:frostwire:frostwire:6.7.1:build267:*:*:*:desktop:*:*\", \"matchCriteriaId\": \"3BB8E411-78E1-4213-8E86-6FADF3AC6B35\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:frostwire:frostwire:6.7.1:build268:*:*:*:desktop:*:*\", \"matchCriteriaId\": \"ACFCCFA4-F31D-475F-991E-5EEFBE914EF7\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:frostwire:frostwire:6.7.2:build269:*:*:*:desktop:*:*\", \"matchCriteriaId\": \"EA14ECAA-FC1C-4683-8E09-35ABFB8CEAF5\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:frostwire:frostwire:6.7.2:build270:*:*:*:desktop:*:*\", \"matchCriteriaId\": \"ED3B979C-11EF-4711-96F8-3D467285CB7E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:frostwire:frostwire:6.7.3:build271:*:*:*:desktop:*:*\", \"matchCriteriaId\": \"984D575B-CC5D-4F86-87BE-E5ECE078BF62\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:frostwire:frostwire:6.7.4:build272:*:*:*:desktop:*:*\", \"matchCriteriaId\": \"E7C9A213-47AE-456F-812E-4B80F2D62162\"}]}]}]",
"descriptions": "[{\"lang\": \"en\", \"value\": \"FrostWire version \u003c= frostwire-desktop-6.7.4-build-272 contains a XML External Entity (XXE) vulnerability in Man in the middle on update that can result in Disclosure of confidential data, denial of service, SSRF, port scanning. This attack appear to be exploitable via Man in the middle the call to update the software.\"}, {\"lang\": \"es\", \"value\": \"FrostWire, en versiones iguales o anteriores a la frostwire-desktop-6.7.4-build-272, contiene una vulnerabilidad de XEE (XML External Entity) en modo Man-in-the-Middle (MitM) en las actualizaciones que puede resultar en la divulgaci\\u00f3n de datos confidenciales, una denegaci\\u00f3n de servicio (DoS), Server-Side Request Forgery (SSRF) o el escaneo de puertos. El ataque parece ser explotable mediante un Man-in-the-Middle (MitM) en una llamada para actualizar el software.\"}]",
"id": "CVE-2018-1000828",
"lastModified": "2024-11-21T03:40:26.527",
"metrics": "{\"cvssMetricV31\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H\", \"baseScore\": 9.0, \"baseSeverity\": \"CRITICAL\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"NONE\", \"scope\": \"CHANGED\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"HIGH\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 2.2, \"impactScore\": 6.0}], \"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:M/Au:N/C:P/I:P/A:P\", \"baseScore\": 6.8, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"MEDIUM\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"PARTIAL\", \"integrityImpact\": \"PARTIAL\", \"availabilityImpact\": \"PARTIAL\"}, \"baseSeverity\": \"MEDIUM\", \"exploitabilityScore\": 8.6, \"impactScore\": 6.4, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": false}]}",
"published": "2018-12-20T15:29:01.190",
"references": "[{\"url\": \"https://0dd.zone/2018/10/28/frostwire-XXE-MitM/\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://github.com/frostwire/frostwire/issues/829\", \"source\": \"cve@mitre.org\", \"tags\": [\"Issue Tracking\", \"Third Party Advisory\"]}, {\"url\": \"https://0dd.zone/2018/10/28/frostwire-XXE-MitM/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://github.com/frostwire/frostwire/issues/829\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Issue Tracking\", \"Third Party Advisory\"]}]",
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Modified",
"weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-611\"}]}]"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2018-1000828\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2018-12-20T15:29:01.190\",\"lastModified\":\"2024-11-21T03:40:26.527\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"FrostWire version \u003c= frostwire-desktop-6.7.4-build-272 contains a XML External Entity (XXE) vulnerability in Man in the middle on update that can result in Disclosure of confidential data, denial of service, SSRF, port scanning. This attack appear to be exploitable via Man in the middle the call to update the software.\"},{\"lang\":\"es\",\"value\":\"FrostWire, en versiones iguales o anteriores a la frostwire-desktop-6.7.4-build-272, contiene una vulnerabilidad de XEE (XML External Entity) en modo Man-in-the-Middle (MitM) en las actualizaciones que puede resultar en la divulgaci\u00f3n de datos confidenciales, una denegaci\u00f3n de servicio (DoS), Server-Side Request Forgery (SSRF) o el escaneo de puertos. El ataque parece ser explotable mediante un Man-in-the-Middle (MitM) en una llamada para actualizar el software.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H\",\"baseScore\":9.0,\"baseSeverity\":\"CRITICAL\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":2.2,\"impactScore\":6.0}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:M/Au:N/C:P/I:P/A:P\",\"baseScore\":6.8,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"MEDIUM\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":8.6,\"impactScore\":6.4,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-611\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:frostwire:frostwire:1.9.9:build246:*:*:*:desktop:*:*\",\"matchCriteriaId\":\"4E95E0EA-7F5F-43B7-BE1B-E2AB7907455F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:frostwire:frostwire:1.9.9:build247:*:*:*:desktop:*:*\",\"matchCriteriaId\":\"0AA38B2E-78AC-471D-94DC-4C6ECA82DC92\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:frostwire:frostwire:2.0.7:build263:*:*:*:desktop:*:*\",\"matchCriteriaId\":\"C486DDC6-45F0-454E-AAC8-810624DB73C6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:frostwire:frostwire:6.1.6:build166:*:*:*:desktop:*:*\",\"matchCriteriaId\":\"96E555C6-DC2B-4F2E-9856-BBF30788F723\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:frostwire:frostwire:6.1.6:build167:*:*:*:desktop:*:*\",\"matchCriteriaId\":\"0132EF81-818F-480F-BC36-51923728B0A5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:frostwire:frostwire:6.1.7:build168:*:*:*:desktop:*:*\",\"matchCriteriaId\":\"1495B24D-E5E8-42D2-ABA3-6F4917337C9F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:frostwire:frostwire:6.1.8:build169:*:*:*:desktop:*:*\",\"matchCriteriaId\":\"97C1475A-7F88-40D2-973E-145B32B726D0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:frostwire:frostwire:6.1.9:build172:*:*:*:desktop:*:*\",\"matchCriteriaId\":\"8A6FF2BB-FE03-4AF4-96E0-3BA5C33DFC51\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:frostwire:frostwire:6.2.0:build173:*:*:*:desktop:*:*\",\"matchCriteriaId\":\"CE90F675-07E4-4CAD-AB19-8986F2E4713F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:frostwire:frostwire:6.2.0:build174:*:*:*:desktop:*:*\",\"matchCriteriaId\":\"C9FAC4E2-87D5-4AAC-B6A3-9A37CED30C25\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:frostwire:frostwire:6.2.1:build175:*:*:*:desktop:*:*\",\"matchCriteriaId\":\"AB669275-0836-48F9-A74D-FFC4A5E59485\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:frostwire:frostwire:6.2.2:build176:*:*:*:desktop:*:*\",\"matchCriteriaId\":\"FF02652D-4BE6-4FA2-9117-154888570B32\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:frostwire:frostwire:6.2.3:build177:*:*:*:desktop:*:*\",\"matchCriteriaId\":\"4BA148E5-209A-42EF-A723-C054AA8927FC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:frostwire:frostwire:6.2.3:build178:*:*:*:desktop:*:*\",\"matchCriteriaId\":\"1B6ACE52-5373-4EE7-ACA7-925902434CC6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:frostwire:frostwire:6.2.4:build179:*:*:*:desktop:*:*\",\"matchCriteriaId\":\"2428B046-09A4-49FF-80C2-DAFB54BD050D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:frostwire:frostwire:6.3.0:build180:*:*:*:desktop:*:*\",\"matchCriteriaId\":\"244B2B80-43DE-4799-864A-E1677F39C514\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:frostwire:frostwire:6.3.0:build181:*:*:*:desktop:*:*\",\"matchCriteriaId\":\"DA70A608-C3B4-4C4F-823E-B6EEEFD46C2C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:frostwire:frostwire:6.3.0:build182:*:*:*:desktop:*:*\",\"matchCriteriaId\":\"D3A162B3-6A3F-479D-99B1-4B3DCF74A5CE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:frostwire:frostwire:6.3.0:build183:*:*:*:desktop:*:*\",\"matchCriteriaId\":\"BDAF2AFD-8616-41FE-844B-40537A44B96B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:frostwire:frostwire:6.3.0:build184:*:*:*:desktop:*:*\",\"matchCriteriaId\":\"61EEDE0E-E1CF-4F06-9DE8-E5063FBE57AC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:frostwire:frostwire:6.3.0:build185:*:*:*:desktop:*:*\",\"matchCriteriaId\":\"12820242-D622-49F1-BD41-77D9991634F4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:frostwire:frostwire:6.3.1:build186:*:*:*:desktop:*:*\",\"matchCriteriaId\":\"CB3F79B1-A811-44F1-B892-6B5DAC65CCAB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:frostwire:frostwire:6.3.2:build187:*:*:*:desktop:*:*\",\"matchCriteriaId\":\"CF1ADD60-4792-4CC5-A8DC-AB82047EF5EC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:frostwire:frostwire:6.3.2:build188:*:*:*:desktop:*:*\",\"matchCriteriaId\":\"A1C3ABAC-84D6-4260-96AE-841FCF0ADF20\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:frostwire:frostwire:6.3.3:build189:*:*:*:desktop:*:*\",\"matchCriteriaId\":\"147D0437-6534-4400-A4B1-4BEC9CD0E79F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:frostwire:frostwire:6.3.3:build190:*:*:*:desktop:*:*\",\"matchCriteriaId\":\"10D3A6E2-8C61-4941-A94D-CB025D5511CF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:frostwire:frostwire:6.3.3:build193:*:*:*:desktop:*:*\",\"matchCriteriaId\":\"94511687-D237-497E-8B26-79E80D3C6ACB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:frostwire:frostwire:6.3.3:build255:*:*:*:desktop:*:*\",\"matchCriteriaId\":\"FDE462AA-41A2-4BC5-897F-B013D64C001B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:frostwire:frostwire:6.3.4:build193:*:*:*:desktop:*:*\",\"matchCriteriaId\":\"232BFF4C-0D70-402D-AE8E-4645C142C503\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:frostwire:frostwire:6.3.4:build194:*:*:*:desktop:*:*\",\"matchCriteriaId\":\"A96B3160-D50B-414F-A446-AD0DB1D0B2FA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:frostwire:frostwire:6.3.5:build195:*:*:*:desktop:*:*\",\"matchCriteriaId\":\"6A6A5BE2-9293-4F3D-8297-CF7D9DCF178D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:frostwire:frostwire:6.3.5:build197:*:*:*:desktop:*:*\",\"matchCriteriaId\":\"C49442FC-5201-4D13-9022-AFD2D27BB480\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:frostwire:frostwire:6.3.5:build198:*:*:*:desktop:*:*\",\"matchCriteriaId\":\"DE9C2B90-435D-4506-91D8-A7E1DEC05775\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:frostwire:frostwire:6.3.6:build201:*:*:*:desktop:*:*\",\"matchCriteriaId\":\"0DEF48EB-EF46-42F6-9B93-84A346508251\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:frostwire:frostwire:6.3.6:build202:*:*:*:desktop:*:*\",\"matchCriteriaId\":\"8D8FB038-5DE4-42E1-9D23-DF14D9A35625\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:frostwire:frostwire:6.3.7:build203:*:*:*:desktop:*:*\",\"matchCriteriaId\":\"F698AC23-AB78-4B97-97C3-ED005F626C67\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:frostwire:frostwire:6.3.7:build204:*:*:*:desktop:*:*\",\"matchCriteriaId\":\"5CF77E33-22BC-433B-B8CE-D684189387CA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:frostwire:frostwire:6.3.7:build205:*:*:*:desktop:*:*\",\"matchCriteriaId\":\"7563D5A0-35D2-453E-B0C4-94BC6DBDBBB2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:frostwire:frostwire:6.3.7:build206:*:*:*:desktop:*:*\",\"matchCriteriaId\":\"F92400DF-A496-4BC9-8303-942F799463BF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:frostwire:frostwire:6.4.0:build207:*:*:*:desktop:*:*\",\"matchCriteriaId\":\"84BD1753-CFB2-4552-966D-65B9E467FAB5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:frostwire:frostwire:6.4.0:build208:*:*:*:desktop:*:*\",\"matchCriteriaId\":\"F4CCE584-55F0-45CE-ADC0-3B764E2E69B8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:frostwire:frostwire:6.4.1:build209:*:*:*:desktop:*:*\",\"matchCriteriaId\":\"35225390-F59F-40E1-B491-47501ACE2A92\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:frostwire:frostwire:6.4.1:build210:*:*:*:desktop:*:*\",\"matchCriteriaId\":\"0866BDCE-D7A1-467F-8864-A02C96B539E6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:frostwire:frostwire:6.4.2:build212:*:*:*:desktop:*:*\",\"matchCriteriaId\":\"8BE43E96-49F7-414B-87ED-B4BA28172154\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:frostwire:frostwire:6.4.3:build214:*:*:*:desktop:*:*\",\"matchCriteriaId\":\"5BFC12DE-9570-4090-92BF-4DDD8E860A55\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:frostwire:frostwire:6.4.4:build215:*:*:*:desktop:*:*\",\"matchCriteriaId\":\"7549971B-C972-4B96-8455-7D5C570B7005\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:frostwire:frostwire:6.4.5:build218:*:*:*:desktop:*:*\",\"matchCriteriaId\":\"C3737065-1FE8-4CBE-BA54-5BF3C4798CD2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:frostwire:frostwire:6.4.5:build219:*:*:*:desktop:*:*\",\"matchCriteriaId\":\"CEA2A8AA-FEDE-4EF9-9445-2A1F739B50C2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:frostwire:frostwire:6.4.5:build220:*:*:*:desktop:*:*\",\"matchCriteriaId\":\"9400DE0C-BE29-4BB5-AB64-91C720A3E9B0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:frostwire:frostwire:6.4.5:build221:*:*:*:desktop:*:*\",\"matchCriteriaId\":\"386EF955-2F9A-42EA-BD72-79736A2BF466\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:frostwire:frostwire:6.4.5:build222:*:*:*:desktop:*:*\",\"matchCriteriaId\":\"57A1D356-9D1A-4605-A5E9-2C8CE13A4537\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:frostwire:frostwire:6.4.6:build223:*:*:*:desktop:*:*\",\"matchCriteriaId\":\"EC0A0D7E-CA6B-464C-9372-F4E4505BEE19\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:frostwire:frostwire:6.4.6:build227:*:*:*:desktop:*:*\",\"matchCriteriaId\":\"C1040EA6-6BAE-4570-B483-15D97BA8DF78\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:frostwire:frostwire:6.4.7:build228:*:*:*:desktop:*:*\",\"matchCriteriaId\":\"701FEDD5-7407-4C6D-9802-F1ABCAC48B9F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:frostwire:frostwire:6.4.7:build229:*:*:*:desktop:*:*\",\"matchCriteriaId\":\"FDCF12B9-25C6-4370-990E-2799DB5EABF8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:frostwire:frostwire:6.4.8:build230:*:*:*:desktop:*:*\",\"matchCriteriaId\":\"A4356B54-6472-4E45-91A3-F02F3A40975D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:frostwire:frostwire:6.4.8:build232:*:*:*:desktop:*:*\",\"matchCriteriaId\":\"E6296443-EB65-4284-87B6-FF5E88E2AB88\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:frostwire:frostwire:6.4.8:build233:*:*:*:desktop:*:*\",\"matchCriteriaId\":\"B1AC7EEE-63DF-4562-9BF0-A47F892112F9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:frostwire:frostwire:6.4.8:build234:*:*:*:desktop:*:*\",\"matchCriteriaId\":\"21CEC55B-4970-4BDB-BCAD-7F3CAFF55764\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:frostwire:frostwire:6.4.9:build235:*:*:*:desktop:*:*\",\"matchCriteriaId\":\"63076BE3-277C-4E58-AE8C-BAE2DFE70E39\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:frostwire:frostwire:6.5.0:build236:*:*:*:desktop:*:*\",\"matchCriteriaId\":\"F5E96164-6326-44D2-8F36-B2715BC62749\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:frostwire:frostwire:6.5.1:build238:*:*:*:desktop:*:*\",\"matchCriteriaId\":\"A868DD7E-E457-4C36-B851-E8276C3119CD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:frostwire:frostwire:6.5.2:build239:*:*:*:desktop:*:*\",\"matchCriteriaId\":\"E4D6B7ED-7BFD-4322-9378-935DAA0D9577\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:frostwire:frostwire:6.5.3:build240:*:*:*:desktop:*:*\",\"matchCriteriaId\":\"C4EFFE22-22C5-461E-ADD1-78D0A043AC81\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:frostwire:frostwire:6.5.4:build241:*:*:*:desktop:*:*\",\"matchCriteriaId\":\"A895ADA4-F589-4E41-8392-A5FC056FE9BC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:frostwire:frostwire:6.5.5:build242:*:*:*:desktop:*:*\",\"matchCriteriaId\":\"A1FA458E-DACD-404A-B040-3E09B52CF677\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:frostwire:frostwire:6.5.5:build243:*:*:*:desktop:*:*\",\"matchCriteriaId\":\"E515F51E-9B8F-47D1-8029-187F743E2FDC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:frostwire:frostwire:6.5.8:build244:*:*:*:desktop:*:*\",\"matchCriteriaId\":\"52674DBB-21F5-47E4-9406-B80CCA2AE023\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:frostwire:frostwire:6.5.8:build245:*:*:*:desktop:*:*\",\"matchCriteriaId\":\"5747F8E5-EA6D-47A7-9930-0D597765B3C0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:frostwire:frostwire:6.5.9:build246:*:*:*:desktop:*:*\",\"matchCriteriaId\":\"7E96023E-F6FE-41E0-886F-FC24209E2DD1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:frostwire:frostwire:6.6.0:build248:*:*:*:desktop:*:*\",\"matchCriteriaId\":\"4611DF07-416F-4C03-97FC-5673522667EF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:frostwire:frostwire:6.6.1:build249:*:*:*:desktop:*:*\",\"matchCriteriaId\":\"E7F1C38C-F67A-4CB8-ADF0-7EA14B26F6D9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:frostwire:frostwire:6.6.2:build250:*:*:*:desktop:*:*\",\"matchCriteriaId\":\"2958AD44-2388-4C07-80AC-426D639C9953\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:frostwire:frostwire:6.6.2:build251:*:*:*:desktop:*:*\",\"matchCriteriaId\":\"139D0C13-1325-4E2F-B8EB-8261066548BB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:frostwire:frostwire:6.6.3:build252:*:*:*:desktop:*:*\",\"matchCriteriaId\":\"297375AD-4140-4504-B9D7-3BCDD3BF4986\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:frostwire:frostwire:6.6.3:build253:*:*:*:desktop:*:*\",\"matchCriteriaId\":\"C08F2D26-AE23-4CA1-9EA9-EC82FC8B001E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:frostwire:frostwire:6.6.4:build256:*:*:*:desktop:*:*\",\"matchCriteriaId\":\"538E483B-8A9E-4B3C-8D78-502656C29A3D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:frostwire:frostwire:6.6.5:build257:*:*:*:desktop:*:*\",\"matchCriteriaId\":\"07053E7A-6D11-4568-AFBE-EAA343EE9A06\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:frostwire:frostwire:6.6.6:build258:*:*:*:desktop:*:*\",\"matchCriteriaId\":\"23CEE5E2-6F93-4688-8C62-E4F31F118DB2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:frostwire:frostwire:6.6.7:build529:*:*:*:desktop:*:*\",\"matchCriteriaId\":\"569DC93E-D759-4861-BE9E-0F8AD3399A73\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:frostwire:frostwire:6.6.8:build260:*:*:*:desktop:*:*\",\"matchCriteriaId\":\"41C6B5E5-F11A-4F58-BA53-EF488EABA454\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:frostwire:frostwire:6.7.0:build261:*:*:*:desktop:*:*\",\"matchCriteriaId\":\"82CF7542-D0EB-44E4-AD4C-6CE303CA1375\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:frostwire:frostwire:6.7.0:build262:*:*:*:desktop:*:*\",\"matchCriteriaId\":\"B58AADCC-CD14-46AB-AD56-99443B0800EB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:frostwire:frostwire:6.7.0:build264:*:*:*:desktop:*:*\",\"matchCriteriaId\":\"DCF68BCA-710F-4342-B4DE-8E58EB83C15E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:frostwire:frostwire:6.7.0:build265hotfix:*:*:*:desktop:*:*\",\"matchCriteriaId\":\"68042A96-F268-47B3-9CDE-4EF2757AB912\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:frostwire:frostwire:6.7.1:build266:*:*:*:desktop:*:*\",\"matchCriteriaId\":\"6DA329F1-B718-4E42-AF02-C057EAB7C240\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:frostwire:frostwire:6.7.1:build267:*:*:*:desktop:*:*\",\"matchCriteriaId\":\"3BB8E411-78E1-4213-8E86-6FADF3AC6B35\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:frostwire:frostwire:6.7.1:build268:*:*:*:desktop:*:*\",\"matchCriteriaId\":\"ACFCCFA4-F31D-475F-991E-5EEFBE914EF7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:frostwire:frostwire:6.7.2:build269:*:*:*:desktop:*:*\",\"matchCriteriaId\":\"EA14ECAA-FC1C-4683-8E09-35ABFB8CEAF5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:frostwire:frostwire:6.7.2:build270:*:*:*:desktop:*:*\",\"matchCriteriaId\":\"ED3B979C-11EF-4711-96F8-3D467285CB7E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:frostwire:frostwire:6.7.3:build271:*:*:*:desktop:*:*\",\"matchCriteriaId\":\"984D575B-CC5D-4F86-87BE-E5ECE078BF62\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:frostwire:frostwire:6.7.4:build272:*:*:*:desktop:*:*\",\"matchCriteriaId\":\"E7C9A213-47AE-456F-812E-4B80F2D62162\"}]}]}],\"references\":[{\"url\":\"https://0dd.zone/2018/10/28/frostwire-XXE-MitM/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://github.com/frostwire/frostwire/issues/829\",\"source\":\"cve@mitre.org\",\"tags\":[\"Issue Tracking\",\"Third Party Advisory\"]},{\"url\":\"https://0dd.zone/2018/10/28/frostwire-XXE-MitM/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://github.com/frostwire/frostwire/issues/829\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\",\"Third Party Advisory\"]}]}}"
}
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
Loading…
Loading…