XML External Entity Vulnerability in WSO2 Products

CVE-2025-10713

What is CVE-2025-10713?

The vulnerability in multiple WSO2 products arises from improper configuration of the XML parser, allowing the application to parse user-provided XML without adequate restrictions. This weakness can be exploited by attackers to resolve external entities, potentially leading to unauthorized access to sensitive files on the server. Furthermore, the attacker could launch denial-of-service (DoS) attacks, causing critical services to become unavailable. It's crucial for organizations using affected WSO2 products to review their configurations and apply necessary security patches to mitigate these risks.

References