CVE-2019-13625

NSA Ghidra before 9.0.1 allows XXE when a project is opened or restored, or a tool is imported, as demonstrated by a project.prp file...

Design/Logic Flaw

NSA Ghidra before 9.0.1 allows XXE when a project is opened or restored, or a tool is imported, as demonstrated by a project.prp file...

CVE-2019-13625

CVE-2019-13625 affects Ghidra prior to 9.0.1. The issue is an XML External Entity (XXE) vulnerability triggered when opening/restoring a project or importing a tool, demonstrated by a project.prp file. The vulnerability impact is high: potential information disclosure or other impact per CVSS met...