CVE-2018-1000515: News-Articles Project News-Articles

High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days.

ventrian News-Articles version NewsArticles.00.09.11 contains a XML External Entity (XXE) vulnerability in News-Articles/API/MetaWebLog/Handler.ashx.vb that can result in Attacker can read any file in the server or use smbrelay attack to access to server..

Affected products

Published 2018-06-26. Last modified 2026-06-17.