critical9.3
CVE-2025-4641
BoniGarcia WebDriverManager Affected By Improper Restriction of XML External Entity Reference
Impact
Improper Restriction of XML External Entity Reference vulnerability in bonigarcia webdrivermanager on Windows, MacOS, Linux (XML parsing components modules) allows Data Serialization External Entities Blowup. This vulnerability is associated with program files src/main/java/io/github/bonigarcia/wdm/WebDriverManager.java. This issue affects webdrivermanager: from 1.0.0 before 6.1.0.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | io.github.bonigarcia:webdrivermanager | >= 1.0.0, < 6.1.0 | 6.1.0 |
Affected products
| Product | Affected versions |
|---|---|
| Webdrivermanager: From 1.0.0 | before 6.0.2. |
Versions were read from the advisory text. No structured product data has been published for this record yet.