Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2025-4641

XML External Entity (XXE) injection vulnerability in WebDriverManager

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
GovTech CSG

Description

Improper Restriction of XML External Entity Reference vulnerability in bonigarcia webdrivermanager WebDriverManager on Windows, MacOS, Linux (XML parsing components modules) allows Data Serialization External Entities Blowup. This vulnerability is associated with program files src/main/java/io/github/bonigarcia/wdm/WebDriverManager.java. This issue affects webdrivermanager: from 1.0.0 before 6.0.2.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

bonigarcia webdrivermanager

Default version status: affected

  • 1.0.0 to < 6.0.2affected

References