CVE-2025-15251

The CVE-2025-15251 entry describes a vulnerability in beecue FastBee (SIP Message Handler) up to version 2.1. The issue is in getRootElement (springboot/fastbee-server/sip-server/src/main/java/com/fastbee/sip/handler/req/ReqAbstractHandler.java) and manifests as an XML External Entity (XXE) refer...

FastBee code issue vulnerabilities

FastBee is an IoT platform open-sourced by FastBee in China. A code issue vulnerability exists in FastBee 2.1 and earlier versions, which originates from a misuse of the file springboot/fastbee-server/sip-server/src/main/java/com/fastbee/sip/handler/req /ReqAbstractHandler.java could lead to an X...

CVE-2025-15251: Improper Restriction of XML External Entity Reference

A vulnerability was detected in beecue FastBee up to 2.1. Impacted is the function getRootElement of the file springboot/fastbee-server/sip-server/src/main/java/com/fastbee/sip/handler/req/ReqAbstractHandler.java of the component SIP Message Handler. The manipulation results in xml external entit...