← Back to CVEs
CVE-2025-15251
MEDIUM5.6
Description
A vulnerability was detected in beecue FastBee up to 2.1. Impacted is the function getRootElement of the file springboot/fastbee-server/sip-server/src/main/java/com/fastbee/sip/handler/req/ReqAbstractHandler.java of the component SIP Message Handler. The manipulation results in xml external entity reference. It is possible to launch the attack remotely. A high complexity level is associated with this attack. The exploitability is considered difficult. The project owner replied to the issue report: "Okay, we'll handle it as soon as possible."
CVE Details
CVSS v3.1 Score5.6
SeverityMEDIUM
CVSS VectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
Attack VectorNETWORK
ComplexityHIGH
Privileges RequiredNONE
User InteractionNONE
Published12/30/2025
Last Modified12/31/2025
Sourcenvd
Honeypot Sightings0
Weaknesses (CWE)
CWE-610CWE-611
References
https://gitee.com/beecue/fastbee/issues/ID7HNZ(cna@vuldb.com)
https://vuldb.com/?ctiid.338641(cna@vuldb.com)
https://vuldb.com/?id.338641(cna@vuldb.com)
IOC Correlations
No correlations recorded
This product uses data from the NVD API but is not endorsed or certified by the NVD.