CVE-2025-66372

Summary

Mustang before 2.16.3 allows exfiltrating files via XXE attacks.

Affected Software

Weaknesses

• CWE-611: CWE-611 Improper Restriction of XML External Entity Reference

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://github.com/ZUGFeRD/mustangproject/issues/685
• https://github.com/ZUGFeRD/mustangproject/pull/725
• https://github.com/ZUGFeRD/mustangproject/releases/tag/core-2.16.3

• ←Previous
• Next→