CVE-2025-7823

Medium CVSS: 6.9

A vulnerability was found in Jinher OA 1.2. It has been declared as problematic. This vulnerability affects unknown code of the file ProjectScheduleDelete.aspx. The manipulation leads to xml external entity reference. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Vendor

Jinher

Product

Jinher Oa

CWE

CWE-610

Yayın Tarihi

2025-07-19 13:15:24

Güncelleme

2025-08-26 13:29:30

Source Identifier

cna@vuldb.com

KEV Date Added

Kategoriler

CWE-610 Jinher Oa MEDIUM Jinher 2025

Referanslar

https://github.com/cc2024k/CVE/issues/3 https://vuldb.com/?ctiid.316924 https://vuldb.com/?id.316924 https://vuldb.com/?submit.616841

Benzer Kayıtlar

Medium

CVE-2025-11341

A security flaw has been discovered in Jinher OA up to 2.0. This affects an unknown function of the file /c6/Jhsoft.Web.…

Medium

CVE-2025-11035

A vulnerability was determined in Jinher OA 2.0. The impacted element is an unknown function of the file /c6/Jhsoft.Web.…

Medium

CVE-2025-10816

A security flaw has been discovered in Jinher OA 2.0. This affects an unknown part of the file /c6/Jhsoft.Web.module/Too…

Medium

CVE-2025-10092

A vulnerability was found in Jinher OA up to 1.2. This impacts an unknown function of the file /c6/Jhsoft.Web.projectman…

Medium

CVE-2025-10091

A vulnerability has been found in Jinher OA up to 1.2. This affects an unknown function of the file /c6/Jhsoft.Web.proje…

Medium

CVE-2025-10090

A flaw has been found in Jinher OA up to 1.2. The impacted element is an unknown function of the file /C6/Jhsoft.Web.dep…