Critical
Security advisory
FrostWire version <= frostwire-desktop-6.7.4-build-272 contains a XML External Entity (XXE) vulnerability in Man in the middle on update that can result in Disclosure of confidential data, denial of service, SSRF, port scanning. This attack appear to be exploitable via Man in the middle the call to update the software.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2018-1000828
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 31 Oct 2026, 10:09 UTC · Revision 1
Source evidence
FrostWire version <= frostwire-desktop-6.7.4-build-272 contains a XML External Entity (XXE) vulnerability in Man in the middle on update that can result in Disclosure of confidential data, denial of service, SSRF, port scanning. This attack appear to be exploitable via Man in the middle the call to update the software.
osv:CVE-2018-1000828
Complete source record
{
"id": "c922ace159c573534405b51bb8e86978550e32ee624798762a425c4cf732a03d",
"url": "https://osv.dev/vulnerability/CVE-2018-1000828",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "CVE-2018-1000828",
"summary": "FrostWire version <= frostwire-desktop-6.7.4-build-272 contains a XML External Entity (XXE) vulnerability in Man in the middle on update that can result in Disclosure of confidential data, denial of service, SSRF, port scanning. This attack appear to be exploitable via Man in the middle the call to update the software.",
"evidence": "osv:CVE-2018-1000828",
"products": [],
"severity": "critical",
"structured": {
"id": "CVE-2018-1000828",
"aliases": [
"CVE-2018-1000828"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/frostwire/frostwire",
"type": "GIT",
"events": [
{
"introduced": "b91f70d227f2434c8eda9325f1f72e69a1273213"
},
{
"last_affected": "e4b4505f9e3d9b7296e4d6095dc543d24b0a4286"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:frostwire:frostwire:1.9.9:build246:*:*:*:desktop:*:*",
"range": [
{
"introduced": "1.9.9-build246"
},
{
"last_affected": "1.9.9-build246"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:frostwire:frostwire:6.5.9:build246:*:*:*:desktop:*:*",
"range": [
{
"introduced": "6.5.9-build246"
},
{
"last_affected": "6.5.9-build246"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:frostwire:frostwire:1.9.9:build247:*:*:*:desktop:*:*",
"range": [
{
"introduced": "1.9.9-build247"
},
{
"last_affected": "1.9.9-build247"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:frostwire:frostwire:2.0.7:build263:*:*:*:desktop:*:*",
"range": [
{
"introduced": "2.0.7-build263"
},
{
"last_affected": "2.0.7-build263"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:frostwire:frostwire:6.1.6:build166:*:*:*:desktop:*:*",
"range": [
{
"introduced": "6.1.6-build166"
},
{
"last_affected": "6.1.6-build166"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:frostwire:frostwire:6.1.6:build167:*:*:*:desktop:*:*",
"range": [
{
"introduced": "6.1.6-build167"
},
{
"last_affected": "6.1.6-build167"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:frostwire:frostwire:6.1.7:build168:*:*:*:desktop:*:*",
"range": [
{
"introduced": "6.1.7-build168"
},
{
"last_affected": "6.1.7-build168"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:frostwire:frostwire:6.1.8:build169:*:*:*:desktop:*:*",
"range": [
{
"introduced": "6.1.8-build169"
},
{
"last_affected": "6.1.8-build169"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:frostwire:frostwire:6.1.9:build172:*:*:*:desktop:*:*",
"range": [
{
"introduced": "6.1.9-build172"
},
{
"last_affected": "6.1.9-build172"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:frostwire:frostwire:6.2.0:build173:*:*:*:desktop:*:*",
"range": [
{
"introduced": "6.2.0-build173"
},
{
"last_affected": "6.2.0-build173"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:frostwire:frostwire:6.2.0:build174:*:*:*:desktop:*:*",
"range": [
{
"introduced": "6.2.0-build174"
},
{
"last_affected": "6.2.0-build174"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:frostwire:frostwire:6.2.1:build175:*:*:*:desktop:*:*",
"range": [
{
"introduced": "6.2.1-build175"
},
{
"last_affected": "6.2.1-build175"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:frostwire:frostwire:6.2.2:build176:*:*:*:desktop:*:*",
"range": [
{
"introduced": "6.2.2-build176"
},
{
"last_affected": "6.2.2-build176"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:frostwire:frostwire:6.2.3:build177:*:*:*:desktop:*:*",
"range": [
{
"introduced": "6.2.3-build177"
},
{
"last_affected": "6.2.3-build177"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:frostwire:frostwire:6.2.3:build178:*:*:*:desktop:*:*",
"range": [
{
"introduced": "6.2.3-build178"
},
{
"last_affected": "6.2.3-build178"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:frostwire:frostwire:6.2.4:build179:*:*:*:desktop:*:*",
"range": [
{
"introduced": "6.2.4-build179"
},
{
"last_affected": "6.2.4-build179"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:frostwire:frostwire:6.3.0:build180:*:*:*:desktop:*:*",
"range": [
{
"introduced": "6.3.0-build180"
},
{
"last_affected": "6.3.0-build180"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:frostwire:frostwire:6.3.0:build181:*:*:*:desktop:*:*",
"range": [
{
"introduced": "6.3.0-build181"
},
{
"last_affected": "6.3.0-build181"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:frostwire:frostwire:6.3.0:build182:*:*:*:desktop:*:*",
"range": [
{
"introduced": "6.3.0-build182"
},
{
"last_affected": "6.3.0-build182"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:frostwire:frostwire:6.3.0:build183:*:*:*:desktop:*:*",
"range": [
{
"introduced": "6.3.0-build183"
},
{
"last_affected": "6.3.0-build183"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:frostwire:frostwire:6.3.0:build184:*:*:*:desktop:*:*",
"range": [
{
"introduced": "6.3.0-build184"
},
{
"last_affected": "6.3.0-build184"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:frostwire:frostwire:6.3.0:build185:*:*:*:desktop:*:*",
"range": [
{
"introduced": "6.3.0-build185"
},
{
"last_affected": "6.3.0-build185"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:frostwire:frostwire:6.3.1:build186:*:*:*:desktop:*:*",
"range": [
{
"introduced": "6.3.1-build186"
},
{
"last_affected": "6.3.1-build186"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:frostwire:frostwire:6.3.2:build187:*:*:*:desktop:*:*",
"range": [
{
"introduced": "6.3.2-build187"
},
{
"last_affected": "6.3.2-build187"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:frostwire:frostwire:6.3.2:build188:*:*:*:desktop:*:*",
"range": [
{
"introduced": "6.3.2-build188"
},
{
"last_affected": "6.3.2-build188"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:frostwire:frostwire:6.3.3:build189:*:*:*:desktop:*:*",
"range": [
{
"introduced": "6.3.3-build189"
},
{
"last_affected": "6.3.3-build189"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:frostwire:frostwire:6.3.3:build190:*:*:*:desktop:*:*",
"range": [
{
"introduced": "6.3.3-build190"
},
{
"last_affected": "6.3.3-build190"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:frostwire:frostwire:6.3.3:build193:*:*:*:desktop:*:*",
"range": [
{
"introduced": "6.3.3-build193"
},
{
"last_affected": "6.3.3-build193"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:frostwire:frostwire:6.3.3:build255:*:*:*:desktop:*:*",
"range": [
{
"introduced": "6.3.3-build255"
},
{
"last_affected": "6.3.3-build255"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:frostwire:frostwire:6.3.4:build193:*:*:*:desktop:*:*",
"range": [
{
"introduced": "6.3.4-build193"
},
{
"last_affected": "6.3.4-build193"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:frostwire:frostwire:6.3.4:build194:*:*:*:desktop:*:*",
"range": [
{
"introduced": "6.3.4-build194"
},
{
"last_affected": "6.3.4-build194"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:frostwire:frostwire:6.3.5:build195:*:*:*:desktop:*:*",
"range": [
{
"introduced": "6.3.5-build195"
},
{
"last_affected": "6.3.5-build195"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:frostwire:frostwire:6.3.5:build197:*:*:*:desktop:*:*",
"range": [
{
"introduced": "6.3.5-build197"
},
{
"last_affected": "6.3.5-build197"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:frostwire:frostwire:6.3.5:build198:*:*:*:desktop:*:*",
"range": [
{
"introduced": "6.3.5-build198"
},
{
"last_affected": "6.3.5-build198"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:frostwire:frostwire:6.3.6:build201:*:*:*:desktop:*:*",
"range": [
{
"introduced": "6.3.6-build201"
},
{
"last_affected": "6.3.6-build201"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:frostwire:frostwire:6.3.6:build202:*:*:*:desktop:*:*",
"range": [
{
"introduced": "6.3.6-build202"
},
{
"last_affected": "6.3.6-build202"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:frostwire:frostwire:6.3.7:build203:*:*:*:desktop:*:*",
"range": [
{
"introduced": "6.3.7-build203"
},
{
"last_affected": "6.3.7-build203"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:frostwire:frostwire:6.3.7:build204:*:*:*:desktop:*:*",
"range": [
{
"introduced": "6.3.7-build204"
},
{
"last_affected": "6.3.7-build204"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:frostwire:frostwire:6.3.7:build205:*:*:*:desktop:*:*",
"range": [
{
"introduced": "6.3.7-build205"
},
{
"last_affected": "6.3.7-build205"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:frostwire:frostwire:6.3.7:build206:*:*:*:desktop:*:*",
"range": [
{
"introduced": "6.3.7-build206"
},
{
"last_affected": "6.3.7-build206"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:frostwire:frostwire:6.4.0:build207:*:*:*:desktop:*:*",
"range": [
{
"introduced": "6.4.0-build207"
},
{
"last_affected": "6.4.0-build207"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:frostwire:frostwire:6.4.0:build208:*:*:*:desktop:*:*",
"range": [
{
"introduced": "6.4.0-build208"
},
{
"last_affected": "6.4.0-build208"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:frostwire:frostwire:6.4.1:build209:*:*:*:desktop:*:*",
"range": [
{
"introduced": "6.4.1-build209"
},
{
"last_affected": "6.4.1-build209"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:frostwire:frostwire:6.4.1:build210:*:*:*:desktop:*:*",
"range": [
{
"introduced": "6.4.1-build210"
},
{
"last_affected": "6.4.1-build210"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:frostwire:frostwire:6.4.2:build212:*:*:*:desktop:*:*",
"range": [
{
"introduced": "6.4.2-build212"
},
{
"last_affected": "6.4.2-build212"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:frostwire:frostwire:6.4.3:build214:*:*:*:desktop:*:*",
"range": [
{
"introduced": "6.4.3-build214"
},
{
"last_affected": "6.4.3-build214"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:frostwire:frostwire:6.4.4:build215:*:*:*:desktop:*:*",
"range": [
{
"introduced": "6.4.4-build215"
},
{
"last_affected": "6.4.4-build215"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:frostwire:frostwire:6.4.5:build218:*:*:*:desktop:*:*",
"range": [
{
"introduced": "6.4.5-build218"
},
{
"last_affected": "6.4.5-build218"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:frostwire:frostwire:6.4.5:build219:*:*:*:desktop:*:*",
"range": [
{
"introduced": "6.4.5-build219"
},
{
"last_affected": "6.4.5-build219"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:frostwire:frostwire:6.4.5:build220:*:*:*:desktop:*:*",
"range": [
{
"introduced": "6.4.5-build220"
},
{
"last_affected": "6.4.5-build220"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:frostwire:frostwire:6.4.5:build221:*:*:*:desktop:*:*",
"range": [
{
"introduced": "6.4.5-build221"
},
{
"last_affected": "6.4.5-build221"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:frostwire:frostwire:6.4.5:build222:*:*:*:desktop:*:*",
"range": [
{
"introduced": "6.4.5-build222"
},
{
"last_affected": "6.4.5-build222"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:frostwire:frostwire:6.4.6:build223:*:*:*:desktop:*:*",
"range": [
{
"introduced": "6.4.6-build223"
},
{
"last_affected": "6.4.6-build223"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:frostwire:frostwire:6.4.6:build227:*:*:*:desktop:*:*",
"range": [
{
"introduced": "6.4.6-build227"
},
{
"last_affected": "6.4.6-build227"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:frostwire:frostwire:6.4.7:build228:*:*:*:desktop:*:*",
"range": [
{
"introduced": "6.4.7-build228"
},
{
"last_affected": "6.4.7-build228"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:frostwire:frostwire:6.4.7:build229:*:*:*:desktop:*:*",
"range": [
{
"introduced": "6.4.7-build229"
},
{
"last_affected": "6.4.7-build229"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:frostwire:frostwire:6.4.8:build230:*:*:*:desktop:*:*",
"range": [
{
"introduced": "6.4.8-build230"
},
{
"last_affected": "6.4.8-build230"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:frostwire:frostwire:6.4.8:build232:*:*:*:desktop:*:*",
"range": [
{
"introduced": "6.4.8-build232"
},
{
"last_affected": "6.4.8-build232"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:frostwire:frostwire:6.4.8:build233:*:*:*:desktop:*:*",
"range": [
{
"introduced": "6.4.8-build233"
},
{
"last_affected": "6.4.8-build233"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:frostwire:frostwire:6.4.8:build234:*:*:*:desktop:*:*",
"range": [
{
"introduced": "6.4.8-build234"
},
{
"last_affected": "6.4.8-build234"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:frostwire:frostwire:6.4.9:build235:*:*:*:desktop:*:*",
"range": [
{
"introduced": "6.4.9-build235"
},
{
"last_affected": "6.4.9-build235"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:frostwire:frostwire:6.5.0:build236:*:*:*:desktop:*:*",
"range": [
{
"introduced": "6.5.0-build236"
},
{
"last_affected": "6.5.0-build236"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:frostwire:frostwire:6.5.1:build238:*:*:*:desktop:*:*",
"range": [
{
"introduced": "6.5.1-build238"
},
{
"last_affected": "6.5.1-build238"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:frostwire:frostwire:6.5.2:build239:*:*:*:desktop:*:*",
"range": [
{
"introduced": "6.5.2-build239"
},
{
"last_affected": "6.5.2-build239"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:frostwire:frostwire:6.5.3:build240:*:*:*:desktop:*:*",
"range": [
{
"introduced": "6.5.3-build240"
},
{
"last_affected": "6.5.3-build240"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:frostwire:frostwire:6.5.4:build241:*:*:*:desktop:*:*",
"range": [
{
"introduced": "6.5.4-build241"
},
{
"last_affected": "6.5.4-build241"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:frostwire:frostwire:6.5.5:build242:*:*:*:desktop:*:*",
"range": [
{
"introduced": "6.5.5-build242"
},
{
"last_affected": "6.5.5-build242"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:frostwire:frostwire:6.5.5:build243:*:*:*:desktop:*:*",
"range": [
{
"introduced": "6.5.5-build243"
},
{
"last_affected": "6.5.5-build243"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:frostwire:frostwire:6.5.8:build244:*:*:*:desktop:*:*",
"range": [
{
"introduced": "6.5.8-build244"
},
{
"last_affected": "6.5.8-build244"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:frostwire:frostwire:6.5.8:build245:*:*:*:desktop:*:*",
"range": [
{
"introduced": "6.5.8-build245"
},
{
"last_affected": "6.5.8-build245"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:frostwire:frostwire:6.6.0:build248:*:*:*:desktop:*:*",
"range": [
{
"introduced": "6.6.0-build248"
},
{
"last_affected": "6.6.0-build248"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:frostwire:frostwire:6.6.1:build249:*:*:*:desktop:*:*",
"range": [
{
"introduced": "6.6.1-build249"
},
{
"last_affected": "6.6.1-build249"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:frostwire:frostwire:6.6.2:build250:*:*:*:desktop:*:*",
"range": [
{
"introduced": "6.6.2-build250"
},
{
"last_affected": "6.6.2-build250"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:frostwire:frostwire:6.6.2:build251:*:*:*:desktop:*:*",
"range": [
{
"introduced": "6.6.2-build251"
},
{
"last_affected": "6.6.2-build251"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:frostwire:frostwire:6.6.3:build252:*:*:*:desktop:*:*",
"range": [
{
"introduced": "6.6.3-build252"
},
{
"last_affected": "6.6.3-build252"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:frostwire:frostwire:6.6.3:build253:*:*:*:desktop:*:*",
"range": [
{
"introduced": "6.6.3-build253"
},
{
"last_affected": "6.6.3-build253"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:frostwire:frostwire:6.6.4:build256:*:*:*:desktop:*:*",
"range": [
{
"introduced": "6.6.4-build256"
},
{
"last_affected": "6.6.4-build256"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:frostwire:frostwire:6.6.5:build257:*:*:*:desktop:*:*",
"range": [
{
"introduced": "6.6.5-build257"
},
{
"last_affected": "6.6.5-build257"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:frostwire:frostwire:6.6.6:build258:*:*:*:desktop:*:*",
"range": [
{
"introduced": "6.6.6-build258"
},
{
"last_affected": "6.6.6-build258"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:frostwire:frostwire:6.6.7:build529:*:*:*:desktop:*:*",
"range": [
{
"introduced": "6.6.7-build529"
},
{
"last_affected": "6.6.7-build529"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:frostwire:frostwire:6.6.8:build260:*:*:*:desktop:*:*",
"range": [
{
"introduced": "6.6.8-build260"
},
{
"last_affected": "6.6.8-build260"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:frostwire:frostwire:6.7.0:build261:*:*:*:desktop:*:*",
"range": [
{
"introduced": "6.7.0-build261"
},
{
"last_affected": "6.7.0-build261"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:frostwire:frostwire:6.7.0:build262:*:*:*:desktop:*:*",
"range": [
{
"introduced": "6.7.0-build262"
},
{
"last_affected": "6.7.0-build262"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:frostwire:frostwire:6.7.0:build264:*:*:*:desktop:*:*",
"range": [
{
"introduced": "6.7.0-build264"
},
{
"last_affected": "6.7.0-build264"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:frostwire:frostwire:6.7.0:build265hotfix:*:*:*:desktop:*:*",
"range": [
{
"introduced": "6.7.0-build265hotfix"
},
{
"last_affected": "6.7.0-build265hotfix"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:frostwire:frostwire:6.7.1:build266:*:*:*:desktop:*:*",
"range": [
{
"introduced": "6.7.1-build266"
},
{
"last_affected": "6.7.1-build266"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:frostwire:frostwire:6.7.1:build267:*:*:*:desktop:*:*",
"range": [
{
"introduced": "6.7.1-build267"
},
{
"last_affected": "6.7.1-build267"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:frostwire:frostwire:6.7.1:build268:*:*:*:desktop:*:*",
"range": [
{
"introduced": "6.7.1-build268"
},
{
"last_affected": "6.7.1-build268"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:frostwire:frostwire:6.7.2:build269:*:*:*:desktop:*:*",
"range": [
{
"introduced": "6.7.2-build269"
},
{
"last_affected": "6.7.2-build269"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:frostwire:frostwire:6.7.2:build270:*:*:*:desktop:*:*",
"range": [
{
"introduced": "6.7.2-build270"
},
{
"last_affected": "6.7.2-build270"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:frostwire:frostwire:6.7.3:build271:*:*:*:desktop:*:*",
"range": [
{
"introduced": "6.7.3-build271"
},
{
"last_affected": "6.7.3-build271"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:frostwire:frostwire:6.7.4:build272:*:*:*:desktop:*:*",
"range": [
{
"introduced": "6.7.4-build272"
},
{
"last_affected": "6.7.4-build272"
}
],
"source": "CPE_STRING"
}
]
}
}
],
"versions": [
"1.9.9-build246",
"1.9.9-build247",
"2.0.7-build263",
"6.1.6-build166",
"6.1.6-build167",
"6.1.7-build168",
"6.1.8-build169",
"6.1.9-build172",
"6.2.0-build173",
"6.2.0-build174",
"6.2.1-build175",
"6.2.2-build176",
"6.2.3-build177",
"6.2.3-build178",
"6.2.4-build179",
"6.3.0-build180",
"6.3.0-build181",
"6.3.0-build182",
"6.3.0-build183",
"6.3.0-build184",
"6.3.0-build185",
"6.3.1-build186",
"6.3.2-build187",
"6.3.2-build188",
"6.3.3-build189",
"6.3.3-build193",
"6.3.3-build255",
"6.3.4-build193",
"6.3.4-build194",
"6.3.5-build195",
"6.3.5-build197",
"6.3.5-build198",
"6.3.6-build201",
"6.3.6-build202",
"6.3.7-build203",
"6.3.7-build204",
"6.3.7-build205",
"6.3.7-build206",
"6.4.0-build207",
"6.4.0-build208",
"6.4.1-build209",
"6.4.1-build210",
"6.4.2-build212",
"6.4.3-build214",
"6.4.4-build215",
"6.4.5-build218",
"6.4.5-build219",
"6.4.5-build220",
"6.4.5-build221",
"6.4.5-build222",
"6.4.6-build223",
"6.4.6-build227",
"6.4.7-build228",
"6.4.7-build229",
"6.4.8-build230",
"6.4.8-build232",
"6.4.8-build233",
"6.4.8-build234",
"6.4.9-build235",
"6.5.0-build236",
"6.5.1-build238",
"6.5.2-build239",
"6.5.3-build240",
"6.5.4-build241",
"6.5.5-build242",
"6.5.5-build243",
"6.5.8-build244",
"6.5.8-build245",
"6.6.0-build248",
"6.6.1-build249",
"6.6.2-build250",
"6.6.2-build251",
"6.6.3-build252",
"6.6.3-build253",
"6.6.4-build256",
"6.6.5-build257",
"6.6.6-build258",
"6.6.7-build529",
"6.6.8-build260",
"6.7.0-build261",
"6.7.0-build262",
"6.7.0-build264",
"6.7.0-build265hotfix",
"6.7.1-build266",
"6.7.1-build267",
"6.7.1-build268",
"6.7.2-build269",
"6.7.2-build270",
"6.7.3-build271",
"6.7.4-build272",
"frostwire-desktop-6.7.4-build-272",
"frostwire-android-2.0.9-build-565",
"frostwire-android-2.0.9-build-563",
"frostwire-desktop-6.7.3-build-271",
"frostwire-android-2.0.8-build-562",
"frostwire-android-2.0.8-build-561",
"frostwire-android-2.0.8-build-560",
"frostwire-android-2.0.8-build-559",
"frostwire-desktop-6.7.2-build-270",
"frostwire-desktop-6.7.2-build-269",
"frostwire-android-2.0.8-build-557",
"frostwire-android-2.0.7-build-566",
"frostwire-android-2.0.7-build-555",
"frostwire-android-2.0.7-build-553",
"frostwire-android-2.0.7-build-552",
"frostwire-android-2.0.7-build-551",
"frostwire-android-2.0.7-build-550",
"frostwire-android-2.0.7-build-549",
"frostwire-desktop-6.7.1-build-268",
"frostwire-android-2.0.7-build-548",
"frostwire-desktop-6.7.1-build-267",
"frostwire-6.7.1-build-267",
"frostwire-desktop-6.7.1-build-266",
"frostwire-android-2.0.7-build-547",
"frostwire-desktop-6.7.0-build-265-hotfix",
"frostwire-desktop-6.7.0-build-264",
"frostwire-desktop-2.0.7-build-263",
"frostwire-android-2.0.6-build-546",
"frostwire-desktop-6.7.0-build-262",
"frostwire-desktop-6.7.0-build-261",
"frostwire-android-2.0.6-build-545",
"frostwire-android-2.0.6-build-544",
"frostwire-desktop-6.6.8-build-260",
"frostwire-android-2.0.6-build-543",
"untagged-d281493985ecb04d0e88",
"frostwire-android-2.0.6-build-542",
"frostwire-android-2.0.5-build-541",
"frostwire-android-2.0.5-build-241",
"frostwire-android-2.0.5-build-540",
"frostwire-android-2.0.5-build-539",
"frostwire-android-2.0.5-build-537",
"frostwire-android-2.0.5-build-536",
"frostwire-android-2.0.5-build-535",
"frostwire-android-2.0.5-build-534",
"frostwire-android-2.0.5-build-533",
"frostwire-android-2.0.5-build-532",
"frostwire-android-2.0.5-build-531",
"frostwire-android-2.0.5-build-530",
"frostwire-desktop-6.6.7-build-529",
"frostwire-android-2.0.5-build-529",
"frostwire-android-2.0.5-build-527",
"frostwire-android-2.0.4-build-526",
"frostwire-desktop-6.6.6-build-258",
"frostwire-android-2.0.4-build-525",
"frostwire-android-2.0.4-build-523",
"frostwire-android-2.0.4-build-522",
"frostwire-android-2.0.3-build-521",
"frostwire-desktop-6.6.5-build-257",
"frostwire-android-2.0.3-build-519",
"frostwire-android-2.0.3-build-517",
"frostwire-android-2.0.3-build-516",
"frostwire-android-2.0.2-build-515",
"frostwire-android-2.0.2-build-514",
"frostwire-desktop-6.6.4-build-256",
"frostwire-android-2.0.2-build-513",
"frostwire-android-2.0.2-build-512",
"frostwire-android-2.0.2-build-511",
"frostwire-android-2.0.2-build-510",
"frostwire-android-2.0.2-build-508",
"frostwire-android-2.0.2-build-507",
"frostwire-android-2.0.2-build-506",
"frostwire-android-2.0.2-build-505",
"frostwire-android-2.0.2-build-504",
"frostwire-android-2.0.2-build-503",
"frostwire-android-2.0.2-build-502",
"frostwire-android-2.0.2-build-501",
"frostwire-android-2.0.2-build-500",
"frostwire-android-2.0.2-build-499",
"frostwire-android-2.0.2-build-498",
"frostwire-desktop-6.3.3-build-255",
"frostwire-android-2.0.2-build-497",
"frostwire-android-2.0.2-build-496",
"frostwire-android-2.0.2-build-495",
"frostwire-android-2.0.2-build-494",
"frostwire-android-2.0.2-build-493",
"frostwire-android-2.0.2-build-492",
"frostwire-desktop-6.6.3-build-253",
"frostwire-desktop-6.6.3-build-252",
"frostwire-android-2.0.2-build-491",
"frostwire-android-2.0.1-build-490",
"frostwire-android-2.0.1-build-489",
"frostwire-android-2.0.1-build-488",
"frostwire-android-2.0.1-build-487",
"frostwire-desktop-6.6.2-build-251",
"frostwire-android-2.0.1-build-486",
"frostwire-desktop-6.6.2-build-250",
"frostwire-android-2.0.0-build-485",
"frostwire-android-2.0.0-build-484",
"frostwire-android-2.0.0-build-483",
"frostwire-android-2.0.0-build-482",
"frostwire-android-2.0.0-build-481",
"frostwire-android-1.9.9-build-478",
"frostwire-android-1.9.9-build-474",
"frostwire-android-1.9.9-build-472",
"frostwire-android-1.9.9-build-471",
"frostwire-android-1.9.9-build-470",
"frostwire-android-1.9.9-build-469",
"frostwire-android-1.9.9-build-467",
"frostwire-android-1.9.9-build-465",
"frostwire-android-1.9.9-build-464",
"frostwire-desktop-6.6.0-build-248",
"frostwire-android-1.9.9-build-463",
"frostwire-android-1.9.9-build-462",
"frostwire-android-1.9.9-build-461",
"frostwire-desktop-1.9.9-build-247",
"frostwire-desktop-6.5.9-build-246",
"frostwire-desktop-1.9.9-build-246"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-1000828.json"
}
}
],
"modified": "2026-10-20T10:49:54.434887299Z",
"provider": "osv",
"references": [
"https://0dd.zone/2018/10/28/frostwire-XXE-MitM/",
"https://github.com/frostwire/frostwire/issues/829"
],
"provider_metadata": {}
},
"related_cves": [
{
"value": "CVE-2018-1000828",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 380963,
"published_at": "2018-12-20T15:29:01.19+00:00"
}