Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5pmw-cmp3-g6wx

Опубликовано: 30 дек. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 6.3
CVSS3: 5.6

Описание

A vulnerability was detected in beecue FastBee up to 2.1. Impacted is the function getRootElement of the file springboot/fastbee-server/sip-server/src/main/java/com/fastbee/sip/handler/req/ReqAbstractHandler.java of the component SIP Message Handler. The manipulation results in xml external entity reference. It is possible to launch the attack remotely. A high complexity level is associated with this attack. The exploitability is considered difficult. The project owner replied to the issue report: "Okay, we'll handle it as soon as possible."

A vulnerability was detected in beecue FastBee up to 2.1. Impacted is the function getRootElement of the file springboot/fastbee-server/sip-server/src/main/java/com/fastbee/sip/handler/req/ReqAbstractHandler.java of the component SIP Message Handler. The manipulation results in xml external entity reference. It is possible to launch the attack remotely. A high complexity level is associated with this attack. The exploitability is considered difficult. The project owner replied to the issue report: "Okay, we'll handle it as soon as possible."

EPSS

Процентиль: 20%
0.00063
Низкий

6.3 Medium

CVSS4

5.6 Medium

CVSS3

Дефекты

CWE-610

Связанные уязвимости

CVSS3: 5.6
nvd
около 1 месяца назад

A vulnerability was detected in beecue FastBee up to 2.1. Impacted is the function getRootElement of the file springboot/fastbee-server/sip-server/src/main/java/com/fastbee/sip/handler/req/ReqAbstractHandler.java of the component SIP Message Handler. The manipulation results in xml external entity reference. It is possible to launch the attack remotely. A high complexity level is associated with this attack. The exploitability is considered difficult. The project owner replied to the issue report: "Okay, we'll handle it as soon as possible."

EPSS

Процентиль: 20%
0.00063
Низкий

6.3 Medium

CVSS4

5.6 Medium

CVSS3

Дефекты

CWE-610