CVE-2020-25020

CVE-2020-25020 is an XML External Entity (XXE) vulnerability in MPXJ up to 8.1.3 that affects the GanttProjectReader and PhoenixReader components. The CVE entry has a US/NE expansion with a CRITICAL 9.8 base score (CVSSv3.1) and a network-based, low-complexity attack vector with no authentication...

CVE-2020-25020

MPXJ through 8.1.3 allows XXE attacks. This affects the GanttProjectReader and PhoenixReader components...

XML External Entity (XXE)

mpxj is vulnerable to XML external entities XXE. An external entity can be created when reading a Primavera XML file...