CVE-2025-23195

An XML External Entity XXE vulnerability exists in the Ambari/Oozie project, allowing an attacker to inject malicious XML entities. This vulnerability occurs due to insecure parsing of XML input using the DocumentBuilderFactory class without disabling external entity resolution. An attacker can...

CVE-2025-23195

An XML External Entity (XXE) vulnerability exists in the Ambari/Oozie project (specifically affecting versions prior to 2.7.9 ). The flaw is caused by insecure XML parsing using the DocumentBuilderFactory class without disabling external entity resolution. An attacker can exploit this to read arb...