Threats tagged 'ghsa-2rmp-qgp4-wg66'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.3	CVE-2025-13209bestfeng oa_git_free · CWE-610 Medium5.32025-11-15GCVE DatabaseCVE-2025-13209 A weakness in bestfeng oa_git_free up to version 9.5 allows remote attackers to exploit an XML External Entity (XXE) vulnerability via the updateWriteBack function in WorkflowPredefineController.java. This vulnerability can lead to information disclosure and impact confidentiality, integrity, and availability. Public exploit code is available. The CVSS score is 6.3, indicating medium severity. Report on CVE-2025-13209 Vulnerability CWE-610 #ghsa-2rmp-qgp4-wg66	GCVE Database	2025-11-15

Page 1 of 1