CVE-2019-20191: sync oxygen xml author – CVSS 7.5 · Watchpost