CVE-2018-1000546

7.8 highEPSS 2.6%

High (7.8) in triplea-game triplea. EPSS 2.6% chance of exploitation in the next 30 days.

Triplea version <= 1.9.0.0.10291 contains a XML External Entity (XXE) vulnerability in Importing game data that can result in Possible information disclosure, server-side request forgery, or remote code execution. This attack appear to be exploitable via Specially crafted game data file (XML).

Severity

CVSS 3.0

7.8 high

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 2.6% chance of exploitation in the next 30 days; higher than 85% of CVEs (scores of 2026-10-31)
CWE: CWE-611
Published: 2018-06-26
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

triplea-game:triplea

References

https://0dd.zone/2018/05/31/TripleA-XXE/
https://github.com/triplea-game/triplea/issues/3442
https://0dd.zone/2018/05/31/TripleA-XXE/
https://github.com/triplea-game/triplea/issues/3442

Check your stack JSON