Search vulnerabilities

Results 1

Export CSV
CVE-2020-25614

xmlquery before 1.3.1 lacks a check for whether a LoadURL response is in the XML format, which allows attackers to cause a denial of service (SIGSEGV) at xmlquery.(*Node).InnerText or possibly have unspecified other impact.

CVSS 3.1 · 9.8 Critical EPSS 1.9% KEV · Not listed
Products