CVE-2019-13625

moderate-risk
Published 2019-07-17

NSA Ghidra before 9.0.1 allows XXE when a project is opened or restored, or a tool is imported, as demonstrated by a project.prp file.

Do I need to act?

-
0.33% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
9
CVSS 9.1/10 Critical
NETWORK / LOW complexity

Affected Products (1)

Affected Vendors

Nsa

References (6)

Exploit http://blog.fxiao.me/ghidra/
Exploit https://github.com/NationalSecurityAgency/ghidra/issues/71
Exploit https://xlab.tencent.com/en/2019/03/18/ghidra-from-xxe-to-rce/
Exploit http://blog.fxiao.me/ghidra/
Exploit https://github.com/NationalSecurityAgency/ghidra/issues/71
Exploit https://xlab.tencent.com/en/2019/03/18/ghidra-from-xxe-to-rce/
37
/ 100
moderate-risk
Severity 31/34 · Critical
Exploitability 1/34 · Minimal
Exposure 5/34 · Minimal