CVE-2025-4641
Improper Restriction of XML External Entity Reference vulnerability in bonigarcia webdrivermanager WebDriverManager on Windows, MacOS, Linux (XML parsing components modules) allows Data Serialization External Entities Blowup. This vulnerability is associated with program files src/main/java/io/github/bonigarcia/wdm/WebDriverManager.java. This issue affects webdrivermanager: from 1.0.0 before 6.0.2.
Scoring
- Severity
- CRITICAL
- CVSS base score
- 9.3
- CVSS vector
- CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:H/SC:H/SI:L/SA:H
- EPSS probability
- 0.56%
- CWE
- CWE-611
- Published
- 2025-05-14
- Last modified
- 2026-03-13
Affected products
- bonigarcia webdrivermanager
Weakness type
Related vulnerabilities
- CVE-2026-19596 — OpenNMS XML collector XXE allows arbitrary file read from the OpenNMS host
- CVE-2026-19614 — XML External Entity (XXE) Injection in CyberELF NanoXML
- CVE-2026-71375 — XXE Vulnerability in Cosminexus Component Container
- CVE-2026-76958 — XML External Entity (XXE) Vulnerability in SAP Integration Suite
- CVE-2026-17443 — IBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEs
- CVE-2026-17444 — IBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEs
- CVE-2026-81832 — IBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEs
- CVE-2026-82525 — Exterro FTK Imager < 8.3 XXE via Report.xml XSLT Processing