CVE-2020-25750
1 advisory.
Packagist/devgroup/dotplant CVE-2020-25750: high 7.5
DotPlant2 Improper Restriction of XML External Entity Reference
Action: Upgrade devgroup/dotplant to 2020-09-14 or later.
composer require devgroup/dotplant:2020-09-14Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2020-09-14 | - |
Fixed versions
| 2020-09-14 |
Sources
- osv: GHSA-c49v-35ff-q9f7
- https://nvd.nist.gov/vuln/detail/CVE-2020-25750
- https://github.com/DevGroup-ru/dotplant2/issues/400
- https://github.com/DevGroup-ru/dotplant2/commit/fee86c7052c227762c7325eb5c2811d9323f8429
CVE-2020-25750 · published · modified · JSON