CVE-2018-1307

HighCVSS 8.1/10Last modified Jun 17, 2026

Description

In Apache jUDDI 3.2 through 3.3.4, if using the WADL2Java or WSDL2Java classes, which parse a local or remote XML document and then mediates the data structures into UDDI data structures, there are little protections present against entity expansion and DTD type of attacks. Mitigation is to use 3.3.5.

Metrics

CVSS 3.0 8.1/10CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-611

Affected software

No affected versions have been published.

Timeline

Published
Feb 9, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-130707.5The mintToken function of a smart contract implementation for EncryptedToken (ECC), an Ethereum token, has an integer overflow that allows tCVE-2018-130717.5The mintToken function of a smart contract implementation for CCindex10 (T10), an Ethereum token, has an integer overflow that allows the owCVE-2018-130727.5The mintToken function of a smart contract implementation for Coffeecoin (COFFEE), an Ethereum token, has an integer overflow that allows thCVE-2018-130737.5The mintToken function of a smart contract implementation for ETHEREUMBLACK (ETCBK), an Ethereum token, has an integer overflow that allows CVE-2018-130747.5The mintToken function of a smart contract implementation for FIBToken (FIB), an Ethereum token, has an integer overflow that allows the ownCVE-2018-130757.5The mintToken function of a smart contract implementation for Carbon Exchange Coin Token (CEC), an Ethereum token, has an integer overflow tCVE-2018-130767.5The mintToken function of a smart contract implementation for Betcash (BC), an Ethereum token, has an integer overflow that allows the ownerCVE-2018-130777.5The mintToken function of a smart contract implementation for CTB, an Ethereum token, has an integer overflow that allows the owner of the cCVE-2018-130787.5The mintToken function of a smart contract implementation for Jitech (JTH), an Ethereum token, has an integer overflow that allows the ownerCVE-2018-130797.5The mintToken function of a smart contract implementation for GoodTo (GTO), an Ethereum token, has an integer overflow that allows the ownerCVE-2018-13087.5This vulnerability in Apache Solr 1.2 to 6.6.2 and 7.0.0 to 7.2.1 relates to an XML external entity expansion (XXE) in the `&dataConfig=<inlCVE-2018-130807.5The mintToken function of a smart contract implementation for Goutex (GTX), an Ethereum token, has an integer overflow that allows the owner
CVE-2018-1307: High severity, CVSS 8.1 | Vulnix