CVE-2025-8355 Information

Aug 09, 2025 cve

Description

In Xerox FreeFlow Core version 8.0.4 improper handling of XML input allows injection of external entities. An attacker can craft malicious XML containing references to internal URLs this results in a Server-Side Request Forgery (SSRF).

Reference

https://securitydocs.business.xerox.com/wp-content/uploads/2025/08/Xerox-Security-Bulletin-025-013-for-Freeflow-Core-8.0.5.pdf

CNNVD-202508-761 (Published: 2025-08-08)

Share on: