CVE-2020-25216

Critical

yWorks yEd Desktop before 3.20.1 allows code execution via an XSL Transformation when using an XML file in conjunction with a custom…

mitre·CWE-91·Published 2020-09-17

CVSS

9.8

EPSS

0.02

KEV

Exploits

cve.orgen

144 chars

yWorks yEd Desktop before 3.20.1 allows code execution via an XSL Transformation when using an XML file in conjunction with a custom stylesheet.

NVDen

144 chars

yWorks yEd Desktop before 3.20.1 allows code execution via an XSL Transformation when using an XML file in conjunction with a custom stylesheet.

yWorks yEd Desktop versiones anteriores a 3.20.1, permite una ejecución de código por medio de una Transformación de XSL cuando se usa un archivo XML en conjunto con una hoja de estilo personalizada

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	7.5	10.0	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P
3.1	Primary	NVD	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H