CVE-2025-7824 Information

Jul 20, 2025 cve

Description

A vulnerability was found in Jinher OA 1.1. It has been rated as problematic. This issue affects some unknown processing of the file XmlHttp.aspx. The manipulation leads to xml external entity reference. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Reference

https://github.com/cc2024k/CVE/issues/2 https://vuldb.com/?ctiid.316925 https://vuldb.com/?id.316925 https://vuldb.com/?submit.616842

Attack Complexity

LOW

Privileges Required

NONE

User Interaction Required

NONE

Scope

NONE

Confidentiality Impact

UNCHANGED

Integrity Impact

LOW

Availability Impact

LOW

Base Score

LOW

Base Severity

7.3

CNNVD-202507-2512 (Published: 2025-07-19)

Share on: