CVE-2025-4639

CWE-611 Improper Restriction of XML External Entity Reference in the getDocumentBuilder() method of WebDav servlet in Peergos. This issue affects Peergos through version 1.1.0.

Score

CVSS 4.0 8.8 High

Status

Deferred - cve_disclosure@tech.gov.sg

Published

2025-05-14

Last modified

2025-05-14

Weaknesses

CWE-611

Affected products

• Peergos (Peergos)

References

• https://github.com/Peergos/Peergos/pull/1267