216.73.216.204

CVE-2025-25589

· Published 18/03/2025 16:15 · Modified 18/03/2025 16:15

Labels: CVE-2025-25589 2025-03-18CVE-2025-25589[email protected]

Essential information

Published
18/03/2025 16:15
Modified
18/03/2025 16:15
Author
—
Creator
—
CISA KEV
No
CWE
—

Description

An XML external entity (XXE) injection vulnerability in the component /weixin/aes/XMLParse.java of yimioa before v2024.07.04 allows attackers to execute arbitrary code via supplying a crafted XML file.

NVD status

Status
Received — CVE has been recently published to the CVE List and has been received by the NVD.
Source
[email protected]
NVD
View on NVD

Affected products (CPE)

ProductCPE
yimioa / yimioa cpe:2.3:a:yimioa:yimioa:*:*:*:*:*:*:*:*

References