CVE-2020-10993

Osmand through 2.0.0 allow XXE because of binary/BinaryMapIndexReader.java...

EUVD-2020-3391

Malware in sbrugna...

CVE-2020-10993

Osmand through 2.0.0 allow XXE because of binary/BinaryMapIndexReader.java...

CVE-2020-10993

Summary: CVE-2020-10993 affects Osmand up to version 2.0.0, enabling an XML External Entity (XXE) vulnerability via binary/BinaryMapIndexReader.java. The issue is described consistently across multiple sources (NVD, Red Hat, OSV, CVE lists) as an XXE in Osmand 2.0.0 and earlier. What’s affected: ...