CVE-2018-1000515 is an XML External Entity (XXE) vulnerability found in version NewsArticles.00.09.11 of the Ventrian News-Articles module. This flaw allows an unauthenticated attacker to read arbitrary files on the server or initiate SMB relay attacks. With a CVSS v3 score of 7.5 (High), it presents a significant risk due to its low attack complexity and lack of user interaction required. While no public exploits, Metasploit modules, or Nuclei templates are currently available, and there is minimal community discussion, organizations using the affected software should patch immediately to mitigate potential data breaches or unauthorized access.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
00.09.11CPE matchmatch criteria | cpe:2.3:a:news-articles_project:news-articles:00.09.11:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.