CVE-2019-20627

Description

AutoUpdater.cs in AutoUpdater.NET before 1.5.8 allows XXE.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

References

• https://github.com/ravibpatel/AutoUpdater.NET/commit/1dc25f2bea6ea522dbac1512b5563c4746d539c3 ↗
• https://github.com/ravibpatel/AutoUpdater.NET/releases/tag/v1.5.8 ↗
• https://www.doyler.net/security-not-included/autoupdater-net-vulnerability ↗