Description
An XXE vulnerability in JnlpSupport in Yet Another Java Service Wrapper (YAJSW) 12.14, as used in NSA Ghidra and other products, allows attackers to exfiltrate data from remote hosts and potentially cause denial-of-service.
Unscored
CVE-2020-6958
EUVD-2020-28098GHSA-j644-hxmh-473f
An XXE vulnerability in JnlpSupport in Yet Another Java Service Wrapper (YAJSW) 12.14, as used in NSA Ghidra and other products, allows att…
Published Jan 13, 2020 · Updated Aug 4, 2024 · Assigned by mitre