CVE-2025-49493

Summary

Akamai CloudTest before 60 2025.06.02 (12988) allows file inclusion via XML External Entity (XXE) injection.

Affected Software

Weaknesses

• CWE-611: CWE-611 Improper Restriction of XML External Entity Reference

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: yes
  • Technical Impact: partial

Additional References

• https://github.com/SystemVll/CVE-2025-49493

References

• https://www.akamai.com/products/cloudtest
• https://techdocs.akamai.com/cloudtest/changelog/june-2-2025-enhancements-and-bug-fixes/

• ←Previous
• Next→