CVE-2020-25216

CVE-2020-25216

EPSS 2.4%

yWorks yEd Desktop before 3.20.1 allows code execution via an XSL Transformation when using an XML file in conjunction with a custom stylesheet.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://www.yworks.com/products/yed/download https://zigrin.com/advisories/yworks-yed-graph-editor-xslt-remote-code-execution-in-xml/