← Retour aux CVEs
CVE-2025-15251
MEDIUM5.6
Description
A vulnerability was detected in beecue FastBee up to 2.1. Impacted is the function getRootElement of the file springboot/fastbee-server/sip-server/src/main/java/com/fastbee/sip/handler/req/ReqAbstractHandler.java of the component SIP Message Handler. The manipulation results in xml external entity reference. It is possible to launch the attack remotely. A high complexity level is associated with this attack. The exploitability is considered difficult. The project owner replied to the issue report: "Okay, we'll handle it as soon as possible."
Details CVE
Score CVSS v3.15.6
SeveriteMEDIUM
Vecteur CVSSCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
Vecteur d'attaqueNETWORK
ComplexiteHIGH
Privileges requisNONE
Interaction utilisateurNONE
Publie12/30/2025
Derniere modification12/31/2025
Sourcenvd
Observations honeypot0
Faiblesses (CWE)
CWE-610CWE-611
References
https://gitee.com/beecue/fastbee/issues/ID7HNZ(cna@vuldb.com)
https://vuldb.com/?ctiid.338641(cna@vuldb.com)
https://vuldb.com/?id.338641(cna@vuldb.com)
Correlations IOC
Aucune correlation enregistree
This product uses data from the NVD API but is not endorsed or certified by the NVD.