2020-03-26 23:41:53
mitre
PUBLISHED
Osmand through 2.0.0 allow XXE because of binary/BinaryMapIndexReader.java.