medium6.3
CVE-2025-11035
A vulnerability was determined in Jinher OA 2.0.
Impact
A vulnerability was determined in Jinher OA 2.0. The impacted element is an unknown function of the file /c6/Jhsoft.Web.module/ToolBar/ManageWord.aspx/?text=GetUrl&style=1. This manipulation causes xml external entity reference. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jinher | Jinher Oa | Version 2.0 |