Lucene search

K
osvGoogleOSV:CVE-2020-25614
HistorySep 16, 2020 - 3:15 p.m.

CVE-2020-25614

2020-09-1615:15:12
Google
osv.dev
7
cve-2020-25614
xmlquery
denial of service

AI Score

7.4

Confidence

High

EPSS

0.005

Percentile

75.3%

xmlquery before 1.3.1 lacks a check for whether a LoadURL response is in the XML format, which allows attackers to cause a denial of service (SIGSEGV) at xmlquery.(*Node).InnerText or possibly have unspecified other impact.

AI Score

7.4

Confidence

High

EPSS

0.005

Percentile

75.3%