CVE-2025-8355 — XXE leading to SSRF
In Xerox FreeFlow Core version 8.0.4, improper handling of XML input allows injection of external entities. An attacker can craft malicious XML containing references to internal…
Published: 2025-08-08 · CVSS: 7.5 · CVSS 3.1
In Xerox FreeFlow Core version 8.0.4, improper handling of XML input allows injection of external entities. An attacker can craft malicious XML containing references to internal URLs, this results in a Server-Side Request Forgery (SSRF).
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7