CVE-2018-1000827

CRITICAL

Ubilling <= 0.9.2 - Info Disclosure, DoS, SSRF, RCE

Title source: llm
STIX 2.1

Description

Ubilling version <= 0.9.2 contains a Other/Unknown vulnerability in user-controlled parameter that can result in Disclosure of confidential data, denial of service, SSRF, remote code execution.

References (2)

Core 2
Core References
Exploit, Third Party Advisory x_refsource_misc
https://0dd.zone/2018/10/28/ubilling-Object-Injection/
Exploit, Issue Tracking, Third Party Advisory x_refsource_misc
https://github.com/nightflyza/Ubilling/issues/330

Scores

CVSS v3 9.8
EPSS 0.0360
EPSS Percentile 88.0%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-502
Status published
Products (1)
ubilling/ubilling < 0.9.2
Published Dec 20, 2018
Tracked Since Feb 18, 2026