CVE-2025-2365: crmeb_java WeChatMessageController.java webHook xml external entity reference
Published Mar 17, 2025
·Updated
A vulnerability, which was classified as problematic, has been found in crmebjava up to 1.3.4. Affected by this issue is the function webHook of the file WeChatMessageController.java. The manipulation leads to xml external entity reference. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
1 affected component
crmeb crmeb_java<=1.3.4
Event History
Mar 17, 2025
CVE Published
via MITRE·06:31 AM
Data Sourced
via MITRE·06:31 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·07:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-2365?
CVE-2025-2365 is classified as a problematic vulnerability.
2
Which software versions are affected by CVE-2025-2365?
CVE-2025-2365 affects crmeb_java versions up to 1.3.4.
3
How does CVE-2025-2365 work?
CVE-2025-2365 allows for XML external entity reference vulnerabilities through the webHook function in WeChatMessageController.java.
4
Can CVE-2025-2365 be exploited remotely?
Yes, the attack associated with CVE-2025-2365 may be launched remotely.
5
How do I fix CVE-2025-2365?
To mitigate CVE-2025-2365, update crmeb_java to a version beyond 1.3.4.