XXE Vulnerability in Ghidra Software by NSA
CVE-2019-13625

9.1CRITICAL

Key Information:

Vendor: Nsa
Status: Ghidra
Vendor: CVE Published:; 17 July 2019

What is CVE-2019-13625?

An XML External Entity (XXE) vulnerability exists in the Ghidra software developed by the National Security Agency. This flaw allows an attacker to manipulate XML data when a project is opened or restored, as well as when tools are imported. Specifically, this vulnerability can be exploited when loading a crafted project.prp file, potentially leading to unauthorized access to files or other sensitive information within the system.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch