AI Score
Confidence
High
EPSS
Percentile
78.1%
NSA Ghidra before 9.0.1 allows XXE when a project is opened or restored, or a tool is imported, as demonstrated by a project.prp file.
blog.fxiao.me/ghidra/
github.com/NationalSecurityAgency/ghidra/issues/71
xlab.tencent.com/en/2019/03/18/ghidra-from-xxe-to-rce/