GitHub Advisoryadvisory · Maven

GHSA-pwm3-776c-8q7q BoniGarcia WebDriverManager Affected By Improper Restriction of XML External Entity Reference

CRITICAL Published 2025-05-14 Modified 2025-05-15 Official page ↗
Aliases
CVE-2025-4641
Ecosystem
Maven
Packages
io.github.bonigarcia:webdrivermanager
Severity
Critical
CVSS vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:H/SC:H/SI:L/SA:H
Weaknesses
CWE-611
Reviewed
2025-05-15

Affected packages

• Maven io.github.bonigarcia:webdrivermanager: >= 1.0.0, < 6.1.0 → fixed in 6.1.0

Description

Improper Restriction of XML External Entity Reference vulnerability in bonigarcia webdrivermanager on Windows, MacOS, Linux (XML parsing components modules) allows Data Serialization External Entities Blowup. This vulnerability is associated with program files src/main/java/io/github/bonigarcia/wdm/WebDriverManager.java. This issue affects webdrivermanager: from 1.0.0 before 6.1.0.

Related

Alias · CVE (1)

  • CVE-2025-4641 Improper Restriction of XML External Entity Reference vulnerability in bonigarcia webdrivermanager WebDriverManager on Windows, MacOS,… vulnerability

Weakness · CWE (1)

  • CWE-611 Improper Restriction of XML External Entity Reference weakness

References