High severity7.5NVD Advisory· Published Jun 23, 2020· Updated Jun 17, 2026
CVE-2020-14940
CVE-2020-14940
Description
An issue was discovered in io/gpx/GPXDocumentReader.java in TuxGuitar 1.5.4. It uses misconfigured XML parsers, leading to XXE while loading GP6 (.gpx) and GP7 (.gp) tablature files.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4- TuxGuitar/TuxGuitardescription
Patches
Vulnerability mechanics
References
2- logicaltrust.net/blog/2020/06/tuxguitar.htmlnvdExploitPatchThird Party Advisory
- sourceforge.net/p/tuxguitar/bugs/126/nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.