CVE-2025-43708
VisiCut 2.1 allows stack consumption via an XML document with nested set elements, as demonstrated by a java.util.HashMap StackOverflowError when refe...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
VisiCut 2.1 allows stack consumption via an XML document with nested set elements, as demonstrated by a java.util.HashMap StackOverflowError when reference='../../../set/set[2]' is used, aka an "insecure deserialization" issue.
Références
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- package github.com
- web visicut.org