CVE-2025-4641CWE-611

XML External Entity (XXE) injection vulnerability in WebDriverManager

Critical · published May 14, 2025

CVSS v4.0
9.3
EPSS
1%
Percentile
45.7
In the wild
Unconfirmed
What it is

Improper Restriction of XML External Entity Reference vulnerability in bonigarcia webdrivermanager WebDriverManager on Windows, MacOS, Linux (XML parsing components modules) allows Data Serialization External Entities Blowup. This vulnerability is associated with program files src/main/java/io/github/bonigarcia/wdm/WebDriverManager.java.

This issue affects webdrivermanager: from 1.0.0 before 6.0.2.

The record
Technical detail
CVSS v4.0
9.3 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:H/SC:H/SI:L/SA:H
EPSS
0.00558 · 45.7th percentile
Weakness
CWE-611 · Improper Restriction of XML External Entity Reference
Published
2025-05-14T18:09Z
EPSS history
Timeline
  • 14 MAY 18:09Z
    XML External Entity (XXE) injection vulnerability in WebDriverManager
    cvelistv5