CVE-2025-35112 — Agiloft XML external entity local path traversal
Agiloft Release 28 contains an XML External Entities vulnerability in any table that allows 'import/export', allowing an authenticated attacker to import the template file and p…
Published: 2025-08-26 · CVSS: 5.1 · CVSS 4.0
Agiloft Release 28 contains an XML External Entities vulnerability in any table that allows 'import/export', allowing an authenticated attacker to import the template file and perform path traversal on the local system files. Users should upgrade to Agiloft Release 31.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7