CVE-2020-25215

yWorks yEd Desktop before 3.20.1 allows XXE attacks via an XML or GraphML document...

CVE-2020-25215

The CVE-2020-25215 entry affects yWorks yEd Desktop prior to version 3.20.1 and is caused by an XML External Entity (XXE) vulnerability in XML/GraphML processing. Reported impact indicates XXE could be exploited via crafted documents, enabling unintended access or disclosure consistent with XXE c...