CVE-2020-25215: XEE
Published Sep 17, 2020
·Updated
yWorks yEd Desktop before 3.20.1 allows XXE attacks via an XML or GraphML document.
Affected Software
1 affected component
yWorks yEd<3.20.1
Event History
Sep 17, 2020
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is CVE-2020-25215?
CVE-2020-25215 is a vulnerability in yWorks yEd Desktop before version 3.20.1 that allows XXE attacks via an XML or GraphML document.
2
What is the severity of CVE-2020-25215?
CVE-2020-25215 has a severity rating of 9.8, which is considered critical.
3
How does CVE-2020-25215 affect yWorks yEd Desktop?
CVE-2020-25215 affects yWorks yEd Desktop versions up to and excluding 3.20.1.
4
How can I fix CVE-2020-25215?
To fix CVE-2020-25215, you should update yWorks yEd Desktop to version 3.20.1 or later.
5
Where can I find more information about CVE-2020-25215?
You can find more information about CVE-2020-25215 on the yWorks website and the Zigrin advisory.