Description
An XML external entity (XXE) injection vulnerability in the component /weixin/aes/XMLParse.java of yimioa before v2024.07.04 allows attackers to execute arbitrary code via supplying a crafted XML file.
High · 8.1
CVE-2025-25589
EUVD-2025-6695GHSA-pfg4-r8vj-qqm4
An XML external entity (XXE) injection vulnerability in the component /weixin/aes/XMLParse.java of yimioa before v2024.07.04 allows attacke…
Published Mar 18, 2025 · Updated Mar 21, 2025 · Assigned by mitre