~ / search / GHSA-pwm3-776c-8q7q

GHSA-pwm3-776c-8q7q

BoniGarcia WebDriverManager Affected By Improper Restriction of XML External Entity Reference

Source: GitHub Advisory Database (reviewed) Critical CVE-2025-4641

Packages

EcosystemPackageAffectedFixed in
Maven io.github.bonigarcia:webdrivermanager >= 1.0.0, < 6.1.0 6.1.0

Details

As written in the advisory (Markdown source, shown as plain text).

Improper Restriction of XML External Entity Reference vulnerability in bonigarcia webdrivermanager on Windows, MacOS, Linux (XML parsing components modules) allows Data Serialization External Entities Blowup. This vulnerability is associated with program files src/main/java/io/github/bonigarcia/wdm/WebDriverManager.java. This issue affects webdrivermanager: from 1.0.0 before 6.1.0.

References

External links from the advisory. They lead to third-party sites.