CVE-2025-68280

The Apache SIS library (versions 0.4 through 1.5 inclusive) is vulnerable to an XML External Entity (XXE) Injection (CWE-611) vulnerability. Specifically, the org.apache.sis.core:sis-metadata module fails to properly restrict XML external entity references. An attacker can submit a malicious XML ...