Read the docs

JabRef

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

JabRef records in CISA KEV

No JabRef vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Jabref 1 record MEDIUM

Records

1 record in Jabref · all components

TI-2018-16005 CVE-2018-1000652 · GHSA-x4cf-86pp-49rw

JabRef version <=4.3.1 contains a XML External Entity (XXE) vulnerability in…

Priority MEDIUM 47

JabRef version <=4.3.1 contains a XML External Entity (XXE) vulnerability in MsBibImporter XML Parser that can result in disclosure of confidential data, denial of service, server side request forgery, port scanning.

CVSS 3.0CRITICAL 10.0 Network No auth No interaction EPSS 0.01937 Published 2018-08-20 No fix listed CWE-611
Open these records in search →