Threats Tagged 'cve-2025-59952'
View all threats tagged with 'cve-2025-59952'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2025-59952'
Click on any threat for detailed analysis and mitigation recommendations
0 Red Hat has released an update for its Build of Apache Camel 4.14 for Quarkus 3.27 (RHBQ 3.27.0.GA) addressing a security vulnerability identified as CVE-2025-59952. This vulnerability affects the minio-java client XML tag, which is susceptible to value substitution issues. The advisory rates the security impact as Important and recommends applying the update to improve security and stability. No specific affected versions are detailed in the advisory. Join the discussion | GCVE Database | 10/23/2025, 21:55:17 UTC Added: 06/28/2026, 22:14:07 UTC |
0 Red Hat build of Apache Camel 4.10.7 for Spring Boot patch release and security update is now available. The purpose of this text-only errata is to inform you about the security issues fixed. Security Fix(es): * spring-security-core: Spring Security authorization bypass (CVE-2025-41248) * spring-core: Spring Framework Annotation Detection Vulnerability (CVE-2025-41249) * spring-core-test: Spring Framework Annotation Detection Vulnerability (CVE-2025-41249) * org.springframework/spring-core: Spring Framework Annotation Detection Vulnerability (CVE-2025-41249) * org.eclipse.jgit: XXE vulnerability in Eclipse JGit (CVE-2025-4949) * netty-codec-http: Netty is vulnerable to request smuggling due to incorrect parsing of chunk extensions (CVE-2025-58056) * netty-codec-http2: Netty is vulnerable to request smuggling due to incorrect parsing of chunk extensions (CVE-2025-58056) * minio: minio-java Client XML Tag is Vulnerable to Value Substitution (CVE-2025-59952) * io.minio/minio: minio-java Client XML Tag is Vulnerable to Value Substitution (CVE-2025-59952) Join the discussion | GCVE Database | 10/14/2025, 17:59:03 UTC Added: 06/10/2026, 11:41:49 UTC |
MinIO Java SDK is a Simple Storage Service (aka S3) client to perform bucket and object operations to any Amazon S3 compatible object storage service. In minio-java versions prior to 8.6.0, XML tag values containing references to system properties or environment variables were automatically substituted with their actual values during processing. This unintended behavior could lead to the exposure of sensitive information, including credentials, file paths, or system configuration details, if such references were present in XML content from untrusted sources. This is fixed in version 8.6.0. Join the discussion | CVE Database V5 | 09/29/2025, 23:32:33 UTC Added: 09/30/2025, 00:09:10 UTC |
Showing 1 to 3 of 3 results