CVE-2018-20298 | BDVDB-2026-110685 Detail

Description#

S3 Browser before 8.1.5 contains an XML external entity (XXE) vulnerability, allowing remote attackers to read arbitrary files and obtain NTLMv2 hash values by tricking a user into connecting to a malicious server via the S3 protocol.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.ptsecurity.com/ww-en/analytics/threatscape/pt-2018-34/
https://s3browser.com/news.aspx

Exploit#

No public exploit known

History#

Version 12018-12-19Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.