Skip to content
CVE PROGRAM SOURCE RECORD2.8 Low

CVE-2025-66372

Mustang before 2.16.3 allows exfiltrating files via XXE attacks.

Description

Mustang before 2.16.3 allows exfiltrating files via XXE attacks.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

mustangproject Mustang

Default version status: unaffected

  • 0 to < 2.16.3affected
pkg:maven/org.mustangproject/validator

References