TI-2018-16052 CVE-2018-1000830 · GHSA-gxp6-8fp7-592pXR3Player version <= V3.124 contains a XML External Entity (XXE) vulnerability in…Priority MEDIUM 46XR3Player version <= V3.124 contains a XML External Entity (XXE) vulnerability in Playlist parser that can result in Disclosure of confidential data, denial of service, SSRF, port scanning.CVSS 3.0CRITICAL 10.0· Network · No auth · No interaction · EPSS 0.01451 · Published 2018-12-20 · No fix listed CWE-611