yWorks yEd Desktop before 3.20.1 allows XXE attacks via an XML or GraphML document.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25215
Reference (s):
- https://www.yworks.com/products/yed/download
Get a Pentest and security assessment of your IT network.
yWorks yEd Desktop before 3.20.1 allows XXE attacks via an XML or GraphML document.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25215
Reference (s):