XML External Entity Vulnerability in Jinher OA Software
CVE-2025-10091
Key Information:
Badges
What is CVE-2025-10091?
A notable vulnerability has been identified in Jinher OA, which implicates its XML Handler component. The flaw resides in the handling of an XML external entity reference through the file '/c6/Jhsoft.Web.projectmanage/ProjectManage/XmlHttp.aspx/?Type=add'. This weakness allows an attacker to perform remote exploitation by manipulating XML documents. Given that details of the exploit have been publicly disclosed, it poses a risk to systems running the affected version of Jinher OA, making timely mitigation essential.
Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
OA 1.0
OA 1.1
OA 1.2
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.
References
CVSS V4
Timeline
- 🟡
Public PoC available
- 👾
Exploit known to exist
Vulnerability published
Vulnerability Reserved