PT-2018-9562 · Sleuth Kit · Autopsy

Prodigysml · Published 2018-12-20 · Updated 2019-01-08 · CVE-2018-1000838

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions autopsy versions prior to 4.9.1

Description The issue concerns a XML External Entity (XXE) vulnerability in the CaseMetadata XML Parser. This can lead to disclosure of confidential data, denial of service, Server-Side Request Forgery (SSRF), and port scanning. The attack is exploitable via specially crafted CaseMetadata.

Recommendations For versions prior to 4.9.1, update to version 4.9.1 or later to resolve the issue. As a temporary workaround, consider restricting the parsing of CaseMetadata XML to minimize the risk of exploitation.

Fix

XXE

Weakness Enumeration

CWE-611

Related Identifiers

CVE-2018-1000838

Affected Products

Autopsy

References · 4

• https://osv.dev/vulnerability/CVE-2018-1000838 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-1000838 · Security Note
• https://github.com/sleuthkit/autopsy/issues/4236 · Note
• https://0dd.zone/2018/10/28/autopsy-XXE · Note