CVE-2020-25215

yWorks yEd Desktop before 3.20.1 allows XXE attacks via an XML or GraphML document...

Design/Logic Flaw

yWorks yEd Desktop before 3.20.1 allows XXE attacks via an XML or GraphML document...

CVE-2020-25215

yWorks yEd Desktop before 3.20.1 allows XXE attacks via an XML or GraphML document...

PT-2020-16022 · Yworks · Yed Desktop

Name of the Vulnerable Software and Affected Versions: yWorks yEd Desktop versions prior to 3.20.1 Description: The issue allows XXE attacks via an XML or GraphML document. Recommendations: For versions prior to 3.20.1, update to version 3.20.1 or later to resolve the issue...