Recent Vulnerabilities Product List Research Posts Trends Blog Docs About Contact

Published: 18/03/2025 Updated: 21/03/2025

XXE Code Execution Vulnerability in Yimioa Before v2024.07.04

An XML external entity (XXE) injection vulnerability exists in the /weixin/aes/XMLParse.java component of yimioa before version 2024.07.04. This vulnerability enables attackers to execute arbitrary code by providing a carefully crafted XML file. The issue affects the software's XML parsing mechanism, which can be manipulated to perform unauthorized actions.

CWE-91 https://nvd.nist.gov https://www.first.org/epss https://gitee.com/r1bbit/yimioa/issues/IBI81R

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2025-25589

Vulnerability Summary

References

Vulmon Search

About

Products

Connect