high8.1
CVE-2025-25589
An XML external entity (XXE) injection vulnerability in the component /weixin/aes/XMLParse.java of yimioa before v2024.07.04 allows attackers to execute arbitr…
Impact
An XML external entity (XXE) injection vulnerability in the component /weixin/aes/XMLParse.java of yimioa before v2024.07.04 allows attackers to execute arbitrary code via supplying a crafted XML file.
Affected products
| Product | Affected versions |
|---|---|
| Yimioa | before 2024.07.04 |
Versions were read from the advisory text. No structured product data has been published for this record yet.