Lucene search
Veracode Vulnerability DatabaseVERACODE:22771HistoryMar 24, 2020 - 6:07 a.m.
XML External Entity (XXE)
2020-03-2406:07:30
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
0.007 Low
EPSS
Percentile
80.4%
AutoUpdater.NET is vulnerable to XML External Entity (XXE). The vulnerability exists as the XML parser used in AutoUpdater does not properly restrict resolving XML external entities.
| CPE | Name | Operator | Version |
|---|---|---|---|
| autoupdater.net.official | le | 1.5.7 | |
| autoupdater.net.official | le | 1.5.7 |
Related
cve
cve
CVE-2019-20627
2020-03-23 17:15:15
cvelist
cvelist
CVE-2019-20627
2020-03-23 16:55:03
osv
osv
CVE-2019-20627
2020-03-23 17:15:15
AutoUpdater.NET allows XXE
2022-05-24 17:12:10
github
github
AutoUpdater.NET allows XXE
2022-05-24 17:12:10
prion
prion
Design/Logic Flaw
2020-03-23 17:15:00
nvd
nvd
CVE-2019-20627
2020-03-23 17:15:15
gitlab
gitlab
Improper Restriction of XML External Entity Reference
2022-05-24 00:00:00