exploitDog

CVE-2019-13625

Опубликовано: 17 июл. 2019

Источник: nvd

CVSS3: 9.1

CVSS2: 9.4

EPSS Низкий

Описание

NSA Ghidra before 9.0.1 allows XXE when a project is opened or restored, or a tool is imported, as demonstrated by a project.prp file.

Ссылки

http://blog.fxiao.me/ghidra/
Exploit
Third Party Advisory
https://github.com/NationalSecurityAgency/ghidra/issues/71
Exploit
Third Party Advisory
https://xlab.tencent.com/en/2019/03/18/ghidra-from-xxe-to-rce/
Exploit
Third Party Advisory
http://blog.fxiao.me/ghidra/
Exploit
Third Party Advisory
https://github.com/NationalSecurityAgency/ghidra/issues/71
Exploit
Third Party Advisory
https://xlab.tencent.com/en/2019/03/18/ghidra-from-xxe-to-rce/
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:nsa:ghidra:*:*:*:*:*:*:*:*

Версия до 9.0.1 (исключая)

EPSS

Процентиль: 55%

0.00325

Низкий

9.1 Critical

CVSS3

9.4 Critical

CVSS2

Дефекты

CWE-611

Связанные уязвимости

CVE-2019-13625

CVSS3: 9.1

debian

больше 6 лет назад

NSA Ghidra before 9.0.1 allows XXE when a project is opened or restore ...

GHSA-f48v-9gwp-8f79

CVSS3: 9.1

github

больше 3 лет назад

NSA Ghidra before 9.0.1 allows XXE when a project is opened or restored, or a tool is imported, as demonstrated by a project.prp file.

EPSS

Процентиль: 55%

0.00325

Низкий

9.1 Critical

CVSS3

9.4 Critical

CVSS2

Дефекты

CWE-611