Lucene search
K

XML External Entity (XXE) Injection

๐Ÿ—“๏ธย 16 May 2025ย 10:10:29Reported byย Veracode Vulnerability DatabaseTypeย 
veracode
ย veracode
๐Ÿ”—ย sca.analysiscenter.veracode.com๐Ÿ‘ย 9ย Views

sulu/sulu is vulnerable to XML External Entity Injection due to improper handling of SVG file uploads.

Related
Detection
Refs
ReporterTitlePublishedViews
Family
Circl
CVE-2025-47778
14 May 202518:31
โ€“circl
CNNVD
Sulu ไปฃ็ ้—ฎ้ข˜ๆผๆดž
14 May 202500:00
โ€“cnnvd
CVE
CVE-2025-47778
14 May 202515:29
โ€“cve
Cvelist
CVE-2025-47778 Sulu vulnerable to XXE in SVG File upload Inspector
14 May 202515:29
โ€“cvelist
EUVD
EUVD-2025-14948
3 Oct 202520:07
โ€“euvd
Github Security Blog
Sulu vulnerable to XXE in SVG File upload Inspector
15 May 202516:08
โ€“github
NVD
CVE-2025-47778
14 May 202516:15
โ€“nvd
OSV
CVE-2025-47778 Sulu vulnerable to XXE in SVG File upload Inspector
14 May 202515:29
โ€“osv
OSV
GHSA-F6RX-HF55-4255 Sulu vulnerable to XXE in SVG File upload Inspector
15 May 202516:08
โ€“osv
Positive Technologies
PT-2025-21177 ยท Sulu ยท Sulu
14 May 202500:00
โ€“ptsecurity
Rows per page
Vulners
Node
sulusulu/suluRange2.5.21โ€“2.5.24php
OR
sulusulu/suluRange2.6.5โ€“2.6.8php
OR
sulusulu/suluRange3.0.0-alpha1โ€“3.0.0-alpha2php
OR
sulusulu/suluMatch2.5.21php
OR
sulusulu/suluMatch2.5.22php
OR
sulusulu/suluMatch2.5.23php
OR
sulusulu/suluMatch2.6.5php
OR
sulusulu/suluMatch2.6.6php
OR
sulusulu/suluMatch2.6.7php
OR
sulusulu/suluMatch3.0.0-alpha1php

Data

Build on a solid foundation withย Vulners data

Weย provide theย essential building blocks forย cybersecurity solutions withย comprehensive, structured, andย constantly updated vulnerability andย exploits data

Api

Power your application withย Vulners API

The Vulners REST API offers reliable, high-performance access toย vulnerabilityย intelligence, withย 99.9%ย SLAย uptime andย CDN-backed data delivery forย seamlessย global access

App

Assess and manage vulnerabilities withย Vulnersย tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

13 Dec 2025 06:13Current
7.1High risk
Vulners AI Score7.1
CVSS 48.6
EPSS0.00243
SSVC
9