CVE-2025-9375

Published: Sep 1, 2025Modified: Jun 17, 2026Deferred

6.9

Vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Show more

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XShow less

Source: help@fluidattacks.com (Secondary)

Description

XML Injection vulnerability in xmltodict allows Input Data Manipulation. This issue affects xmltodict: from 0.14.2 before 0.15.1. NOTE: the scope of this CVE is disputed by the vendor on the grounds that xmltodict.unparse() delegates element-name handling to Python's xml.sax.saxutils.XMLGenerator, and that XMLGenerator should be the component performing validation.

Related CWEs

XML Injection (aka Blind XPath Injection)

The product does not properly neutralize special elements that are used in XML, allowing attackers to modify the syntax, content, or commands of the XML before it is processed by an end system.

References (7)

https://fluidattacks.com/advisories/mono

Source: help@fluidattacks.com

https://github.com/martinblech/xmltodict

Source: help@fluidattacks.com

https://github.com/martinblech/xmltodict/blob/v0.15.1/CHANGELOG.md

Source: help@fluidattacks.com

https://github.com/martinblech/xmltodict/commit/f98c90f071228ed73df997807298e1df4f790c33

Source: help@fluidattacks.com

https://docs.python.org/3/library/xml.sax.utils.html#xml.sax.saxutils.XMLGenerator

Source: af854a3a-2127-422b-91ae-364da2661108

https://docs.python.org/3/library/xml.sax.utils.html#xml.sax.saxutils.escape

Source: af854a3a-2127-422b-91ae-364da2661108

https://github.com/martinblech/xmltodict/issues/377#issuecomment-3255691923

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.