CVE-2025-10713
An XML External Entity (XXE) vulnerability exists in multiple WSO2 products due to improper configuration of the XML parser. The application parses user-supplied XML without applying sufficient restrictions, allowing resolution of external entities.
A successful attack could enable a remote, unauthenticated attacker to read sensitive files from the server's filesystem or perform denial-of-service (DoS) attacks that render affected services unavailable.
A successful attack could enable a remote, unauthenticated attacker to read sensitive files from the server's filesystem or perform denial-of-service (DoS) attacks that render affected services unavailable.
Vendor
Product
CWE
Yayın Tarihi
2025-11-05 18:15:32
Güncelleme
2025-12-04 21:07:04
Source Identifier
ed10eef1-636d-4fbe-9993-6890dfa878f8
KEV Date Added
-