What is GHSA-7qfj-ccv6-r868?

GHSA-7qfj-ccv6-r868 is a security advisory published by GitHub Security Advisories with Critical severity. A XML External Entity (XXE) vulnerability was discovered in symphony\lib\toolkit\class.xmlelement...

Which CVE IDs does GHSA-7qfj-ccv6-r868 cover?

GHSA-7qfj-ccv6-r868 covers the following CVE IDs: CVE-2020-25912. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-7qfj-ccv6-r868?

GHSA-7qfj-ccv6-r868 has a CVSS v3 base score of 9.1, published by GitHub Security Advisories.

GHSA-7qfj-ccv6-r868CriticalCVSS 9.1

A XML External Entity (XXE) vulnerability was discovered in symphony\lib\toolkit\class.xmlelement...

Vendor

GitHub Security Advisories

Published

May 24, 2022

Last Modified

July 5, 2026

🔗 CVE IDs covered (1)

CVE-2020-25912 →

📋 Description

A XML External Entity (XXE) vulnerability was discovered in symphony\lib\toolkit\class.xmlelement.php in Symphony 2.7.10 which can lead to an information disclosure or denial of service (DOS).

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2020-25912
https://github.com/symphonycms/symphonycms/issues/2924
http://symphony.com
https://github.com/advisories/GHSA-7qfj-ccv6-r868