VULNERABILITY INTELLIGENCE

CVE-2018-1000834

CVSS score9 CRITICAL

EPSS probability1.37%

CISA KEVNot currently listed

Published2018-12-20

Last modified2026-06-17

Description

runelite version <= runelite-parent-1.4.23 contains a XML External Entity (XXE) vulnerability in Man in the middle runscape services call that can result in Disclosure of confidential data, denial of service, SSRF, port scanning.