CVE-2018-18737 - An XXE issue was discovered in Douchat 4.0.4 because Data\notify.php calls simplexml_load_string

HIGH

An XXE issue was discovered in Douchat 4.0.4 because Data\notify.php calls simplexml_load_string

Published Oct 28, 2018

7.5

HIGH

CVSS 3.0

EPSS 1.20%

An XXE issue was discovered in Douchat 4.0.4 because Data\notify.php calls simplexml_load_string. This can also be used for SSRF.

No remediation recorded yet.

Weaknesses (1)

CWE-611

XXE

Link	Providers	Tags
https://github.com/AvaterXXX/douchat/blob/master/xxe.md#xxe		x_refsource_MISCExploitThird Party Advisory

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Oct 28, 2018

Updated Aug 5, 2024

Reserved Oct 27, 2018

Updated n/a

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a