Osmand through 2.0.0 allow XXE because of binary/BinaryMapIndexReader.java.
CVSS Score
9.1
EPSS Score
0.004
Published
2020-03-27