CVE-2025-25036

Published: Mar 21, 2025Modified: Mar 21, 2025

6.8

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

Exploitability: 2.3 / Impact: 4.0

Source: disclosure@vulncheck.com (Secondary)

Description

Improper Restriction of XML External Entity Reference vulnerability in Jalios JPlatform allows XML Injection.This issue affects all versions of JPlatform 10 before 10.0.8 (SP8).

Related CWEs

CWE-611

Improper Restriction of XML External Entity Reference

The product processes an XML document that can contain XML entities with URIs that resolve to documents outside of the intended sphere of control, causing the product to embed incorrect documents into its output.

References (3)

https://community.jalios.com/jcms/jc1_893720/en/security-alert-2025-02-19

Source: disclosure@vulncheck.com

https://issues.jalios.com/browse/JCMS-11250

Source: disclosure@vulncheck.com

https://vulncheck.com/advisories/jalios-jplatform-xxe

Source: disclosure@vulncheck.com

Timeline

No history available yet.