IntelliJ IDEA XML parser was found vulnerable to XML External Entity attack, an attacker can exploit the vulnerability by implementing malicious code on both Androidmanifest.xml.
Severity
CVSS 3.0
7.5 high
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
2.3% chance of exploitation in the next 30 days; higher than 82% of CVEs (scores of 2026-10-31)