{"id":"CVE-2018-20222","details":"XXE issue in Airsonic before 10.1.2 during parse.","modified":"2026-07-08T19:45:15.741554Z","published":"2019-04-04T16:29:00.320Z","references":[{"type":"ADVISORY","url":"https://github.com/airsonic/airsonic/blob/master/CHANGELOG.md"},{"type":"ADVISORY","url":"https://github.com/airsonic/airsonic/releases/tag/v10.2.1"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/airsonic/airsonic","events":[{"introduced":"0"},{"fixed":"31fef131db08b4b6472c5fefe4c7647a4fc69cd0"},{"fixed":"58bd1753c9a9c59a69e467b28a2feeea43f17072"}],"database_specific":{"cpe":"cpe:2.3:a:airsonic_project:airsonic:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"fixed":"10.1.2"}],"source":["CPE_RANGE","REFERENCES"]}}],"versions":["v10.2.0","v10.1.1","v10.1.0","v10.0.1","v10.0.0","v6.2.beta3","v6.2.beta2","v6.2.beta1","v6.1.beta2","v6.0.1","v6.1.beta1","v6.1-alpha1"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-20222.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}