What’s Vulnerable › Vulnerabilities

CVE-2025-63917

• Severity: high (CVSS 7.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2025-11-17 · updated 2026-06-17
• Weakness: CWE-611

Description

PDFPatcher thru 1.1.3.4663 executable's XML bookmark import functionality does not restrict XML external entity (XXE) references. The application uses .NET's XmlDocument class without disabling external entity resolution, enabling attackers to: Read arbitrary files from the victim's filesystem, exfiltrate sensitive data via out-of-band (OOB) HTTP requests, perform SSRF attacks against internal network resources, or cause a denial of service via entity expansion attacks.

Affected products

• Cnblogs Pdfpatcher: through 1.1.3.4663

References

• https://github.com/cydtseng/Vulnerability-Research/blob/main/pdfpatcher/XXE-Importers.md
• https://github.com/wmjordan/PDFPatcher
• https://www.cnblogs.com/pdfpatcher

Get alerted when CVE-2025-63917 or the next vulnerability affects your stack