Vulnerabilities > Frostwire

DATE CVE VULNERABILITY TITLE RISK
2018-12-20 CVE-2018-1000828 XXE vulnerability in Frostwire
FrostWire version <= frostwire-desktop-6.7.4-build-272 contains a XML External Entity (XXE) vulnerability in Man in the middle on update that can result in Disclosure of confidential data, denial of service, SSRF, port scanning.
network
high complexity
frostwire CWE-611
critical
9.0