CVE-2025-7824: Jinher OA XmlHttp.aspx xml external entity reference

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2025-07-19 · updated 2026-06-17
Weakness: CWE-610

Description

A vulnerability was found in Jinher OA 1.1. It has been rated as problematic. This issue affects some unknown processing of the file XmlHttp.aspx. The manipulation leads to xml external entity reference. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

Affected products

Jinher OA: 1.1

References

https://github.com/cc2024k/CVE/issues/2
https://vuldb.com/?ctiid.316925
https://vuldb.com/?id.316925
https://vuldb.com/?submit.616842

Get alerted when CVE-2025-7824 or the next vulnerability affects your stack