CVE-2018-1000548: Umlet version < 14.3 contains a XML External Entity (XXE) vulnerability in File parsing that can result in...

Security readout for executives and security teams

CVE-2018-1000548 is an XML External Entity issue in UMLet before 14.3. A malicious UXF diagram file could make the parser expose confidential data, cause denial of service, or trigger server-side requests. The bundle says the issue was fixed in 14.3. Exposure is most likely where UMLet before 14.3 opens UXF files from external or untrusted sources. Server-side exposure is possible only if UXF parsing is automated in a service workflow; the bundle does not confirm such deployments. Prioritize remediation for teams that exchange UMLet diagrams with outsiders or process UXF files automatically. Risk is lower for isolated desktop use with trusted files only, but the potential data disclosure and SSRF impacts justify timely upgrade. Mitigation focus: Upgrade UMLet to version 14.3 or later.; Do not open untrusted UXF files on vulnerable versions.; Check the GitHub issue and vendor project guidance for implementation details..

Prepared

Jun 7, 2026, 06:24 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.