3.0.3

DATE	CVE	VULNERABILITY TITLE	RISK
2018-12-20	CVE-2018-1000838	XXE vulnerability in Sleuthkit Autopsy autopsy version <= 4.9.0 contains a XML External Entity (XXE) vulnerability in CaseMetadata XML Parser that can result in Disclosure of confidential data, denial of service, SSRF, port scanning. network low complexity sleuthkit CWE-611	7.5

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.