CVE-2020-25215 – yWorks yEd Desktop before 3.20.1 allows XXE attacks via an XML or GraphML

yWorks yEd Desktop before 3.20.1 allows XXE attacks via an XML or GraphML document.

 

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25215

Reference (s):

• https://www.yworks.com/products/yed/download