CVE-2020-14940 | BDVDB-2026-137900 Detail

Description#

An issue was discovered in io/gpx/GPXDocumentReader.java in TuxGuitar 1.5.4. It uses misconfigured XML parsers, leading to XXE while loading GP6 (.gpx) and GP7 (.gp) tablature files.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://sourceforge.net/p/tuxguitar/bugs/126/
https://logicaltrust.net/blog/2020/06/tuxguitar.html

Exploit#

No public exploit known

History#

Version 12020-06-23Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.