CVE-2020-25911
1 advisory.
Packagist/modx/revolution CVE-2020-25911: critical 9.1, EPSS 2.38%
XML External Entity vulnerability in MODX CMS
Action: Upgrade modx/revolution to 2.8.0 or later.
composer require modx/revolution:2.8.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.8.0 | - |
Fixed versions
| 2.8.0 |
Sources
- osv: GHSA-vhfp-9wvj-gwvg
- https://nvd.nist.gov/vuln/detail/CVE-2020-25911
- https://github.com/modxcms/revolution/issues/15237
- https://github.com/modxcms/revolution/pull/15238
- https://github.com/modxcms/revolution/pull/15238/commits/1b7ffe02df30f05dbf67dd15e4d8101687c1585a
- https://github.com/dahua966/Vul_disclose/blob/main/XXE_modxcms.md
- https://github.com/modxcms/revolution
CVE-2020-25911 · published · modified · JSON