Approved changes feed: RSS · Atom

cpe:2.3:a:sleuthkit:autopsy:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSleuthkit (1c411a61-a258-5ee3-a63c-98f0f5fb70a7)
ProductAutopsy (ad856a51-e152-522f-9302-7848448a53f8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/autopsy purl2cpe 2026-06-01 10:16:21.165182
pkg:deb/ubuntu/autopsy purl2cpe 2026-06-01 10:16:21.165185
pkg:github/sleuthkit/autopsy purl2cpe 2026-06-01 10:16:21.165188
pkg:rpm/opensuse/autopsy purl2cpe 2026-06-01 10:16:21.165191
pkg:sourceforge/autopsy purl2cpe 2026-06-01 10:16:21.165194

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-1000838 vulnerable 2026-06-08 05:10:26.097815 Details available
autopsy version <= 4.9.0 contains a XML External Entity (XXE) vulnerability in CaseMetadata XML Parser that can result in Disclosure of confidential data, denial of service, SSRF, port scanning. This attack appear to be exploitable via Specially crafted CaseMetadata.
Published: 2018-12-20T15:00:00.000Z
Updated: 2024-09-17T01:10:34.064Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.