CVE-2018-1000823: exist-db:exist-core XML External Entity (XXE) vulnerability

Severity: Critical

CVSS Score: 10

exist version <= 5.0.0-RC4 contains a XML External Entity (XXE) vulnerability in XML Parser for REST Server that can result in Disclosure of confidential data, denial of service, SSRF, port scanning.