{"action":"Upgrade modx/revolution to 2.8.0 or later.","affected":[{"fixed":"2.8.0","introduced":"0"}],"component":"modx/revolution","cve_ids":["CVE-2020-25911"],"ecosystem":"Packagist","epss":0.02384,"exploited":false,"fixed_versions":["2.8.0"],"ghsa_id":"GHSA-vhfp-9wvj-gwvg","id":"tcs_01M5KF96R60Q18BX0YV1DJJNS6","modified_at":"2023-12-06T01:00:26.854731Z","published_at":"2021-11-01T19:19:43Z","references":["https://osv.dev/vulnerability/GHSA-vhfp-9wvj-gwvg","https://nvd.nist.gov/vuln/detail/CVE-2020-25911","https://github.com/modxcms/revolution/issues/15237","https://github.com/modxcms/revolution/pull/15238","https://github.com/modxcms/revolution/pull/15238/commits/1b7ffe02df30f05dbf67dd15e4d8101687c1585a","https://github.com/dahua966/Vul_disclose/blob/main/XXE_modxcms.md","https://github.com/modxcms/revolution"],"severity":{"label":"critical","score":9.1},"sources":[{"source":"osv","source_id":"GHSA-vhfp-9wvj-gwvg","url":"https://osv.dev/vulnerability/GHSA-vhfp-9wvj-gwvg"}],"summary":"XML External Entity vulnerability in MODX CMS"}