CVE-2018-1000829

9.0 criticalEPSS 1.3%

Critical (9.0) in anyplace project anyplace. EPSS 1.3% chance of exploitation in the next 30 days.

Anyplace version before commit 80359b4 contains a XML External Entity (XXE) vulnerability in Man in the middle on map API call that can result in Disclosure of confidential data, denial of service, SSRF, port scanning. This vulnerability appears to have been fixed in after commit 80359b4.

Severity

CVSS 3.0

9.0 critical

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

EPSS: 1.3% chance of exploitation in the next 30 days; higher than 71% of CVEs (scores of 2026-10-31)
CWE: CWE-611
Published: 2018-12-20
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

anyplace_project:anyplace

References

https://0dd.zone/2018/10/28/anyplace-XXE-MitM/
https://github.com/dmsl/anyplace/issues/263
https://0dd.zone/2018/10/28/anyplace-XXE-MitM/
https://github.com/dmsl/anyplace/issues/263

Check your stack JSON