CVE-2020-25020: 
Java vulnerability analysis and mitigation

MPXJ through version 8.1.3 contains an XML External Entity (XXE) vulnerability that affects the GanttProjectReader and PhoenixReader components (NVD). The vulnerability was discovered and disclosed on August 29, 2020, and was assigned identifier CVE-2020-25020.

The vulnerability is classified as an XML External Entity (XXE) attack vulnerability, identified as CWE-611 (Improper Restriction of XML External Entity Reference). The CVSS v3.1 base score is 9.8 CRITICAL with a vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, indicating a critical severity level with potential for high impact on confidentiality, integrity, and availability (NVD).

A successful exploitation of this vulnerability could allow an unauthenticated attacker with network access to compromise the affected components. The high CVSS score indicates that successful attacks could result in complete compromise of system confidentiality, integrity, and availability (NVD).

The vulnerability is easily exploitable by an unauthenticated attacker with network access. No special conditions or user interaction is required for exploitation (NVD).

The vulnerability has been patched in a security fix commit. The fix involves implementing proper XML external entity restrictions in the affected components. Users should upgrade to a version after 8.1.3 to receive the security fix (GitHub Patch).