MediumCVSS 5.5
EPSS 3.7%
Public exploit
XXE in Diving Log 6.0 allows attackers to remotely view local files through a crafted dive.xml file that is mishandled during a Subsurface import.