CVE-2025-48006
Improper restriction of XML external entity reference issue exists in DataSpider Servista 4.4 and earlier. If a specially crafted request is processed, arbitrary files on the fi…
Published: 2025-09-29 · CVSS: 8.8 · CVSS 4.0
Improper restriction of XML external entity reference issue exists in DataSpider Servista 4.4 and earlier. If a specially crafted request is processed, arbitrary files on the file system where the server application for the product is installed may be read, or a denial-of-service (DoS) condition may occur.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7