CVE-2020-26705 – The parseXML function in Easy-XML 0.5.0 was discovered to have a XML External Entity (XXE) …

Vuln ID: CVE-2020-26705 (easyxml)

Published:  2021-10-31  20:15:07Z

Description: The parseXML function in Easy-XML 0.5.0 was discovered to have a XML External Entity (XXE) vulnerability which allows for an attacker to expose sensitive data or perform a denial of service (DOS) via a crafted external entity entered into the XML content as input.

Source: NVD.NIST.GOV

 


Date:

Categorie(s):

Tag(s):