The update process in Xmind 3.4.1 and earlier allow remote attackers to execute arbitrary code via a man-in-the-middle attack.

Published Jan 21, 2020 · Updated Aug 6, 2024 · Assigned by mitre