Threats tagged 'ghsa-39gj-7c5p-ccx8'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.9	CVE-2025-6438CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could cause manipulation of Medium5.92025-07-11GCVE DatabaseCVE-2025-6438 CVE-2025-6438 is a vulnerability classified as CWE-611, involving improper restriction of XML external entity references. This flaw allows manipulation of SOAP API calls and injection of XML external entities, potentially leading to unauthorized file access when the server is accessed over the network using an application account. The vulnerability has a CVSS 3.1 base score of 6.8, indicating medium severity with high confidentiality impact but no integrity or availability impact. Report on CVE-2025-6438 Vulnerability CWE-611 #ghsa-39gj-7c5p-ccx8	GCVE Database	2025-07-11

Page 1 of 1