NSA Ghidra before 9.0.1 allows XXE when a project is opened or restored, or a tool is imported, as demonstrated by a project.prp file.
CVSS Score
9.1
EPSS Score
0.003
Published
2019-07-17
Page 3