Lucene search

K
cvelistMitreCVELIST:CVE-2020-25614
HistorySep 16, 2020 - 2:41 p.m.

CVE-2020-25614

2020-09-1614:41:08
mitre
www.cve.org
3
cve-2020-25614
xmlquery
denial of service

AI Score

9.8

Confidence

High

EPSS

0.005

Percentile

75.3%

xmlquery before 1.3.1 lacks a check for whether a LoadURL response is in the XML format, which allows attackers to cause a denial of service (SIGSEGV) at xmlquery.(*Node).InnerText or possibly have unspecified other impact.

AI Score

9.8

Confidence

High

EPSS

0.005

Percentile

75.3%