Publish Advisories

GHSA-pwm3-776c-8q7q GHSA-pwm3-776c-8q7q
2026-05-22 18:04:22 -07:00 · 2025-05-15 17:29:34 +00:00
parent 0d0b518c1b
commit c137bd2933
2 changed files with 61 additions and 36 deletions
@@ -0,0 +1,61 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-pwm3-776c-8q7q",
+  "modified": "2025-05-15T17:28:16Z",
+  "published": "2025-05-14T21:31:18Z",
+  "aliases": [
+    "CVE-2025-4641"
+  ],
+  "summary": "BoniGarcia WebDriverManager Affected By Improper Restriction of XML External Entity Reference",
+  "details": "Improper Restriction of XML External Entity Reference vulnerability in bonigarcia webdrivermanager on Windows, MacOS, Linux (XML parsing components modules) allows Data Serialization External Entities Blowup. This vulnerability is associated with program files src/main/java/io/github/bonigarcia/wdm/WebDriverManager.java.\n\nThis issue affects webdrivermanager: from 1.0.0 before 6.1.0.",
+  "severity": [
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:H/SC:H/SI:L/SA:H"
+    }
+  ],
+  "affected": [
+    {
+      "package": {
+        "ecosystem": "Maven",
+        "name": "io.github.bonigarcia:webdrivermanager"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "1.0.0"
+            },
+            {
+              "fixed": "6.1.0"
+            }
+          ]
+        }
+      ]
+    }
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4641"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/bonigarcia/webdrivermanager/pull/1458"
+    },
+    {
+      "type": "PACKAGE",
+      "url": "https://github.com/bonigarcia/webdrivermanager"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-611"
+    ],
+    "severity": "CRITICAL",
+    "github_reviewed": true,
+    "github_reviewed_at": "2025-05-15T17:27:58Z",
+    "nvd_published_at": "2025-05-14T19:15:53Z"
+  }
+}
@@ -1,36 +0,0 @@
-{
-  "schema_version": "1.4.0",
-  "id": "GHSA-pwm3-776c-8q7q",
-  "modified": "2025-05-14T21:31:18Z",
-  "published": "2025-05-14T21:31:18Z",
-  "aliases": [
-    "CVE-2025-4641"
-  ],
-  "details": "Improper Restriction of XML External Entity Reference vulnerability in bonigarcia webdrivermanager WebDriverManager on Windows, MacOS, Linux (XML parsing components modules) allows Data Serialization External Entities Blowup. This vulnerability is associated with program files src/main/java/io/github/bonigarcia/wdm/WebDriverManager.java.\n\nThis issue affects webdrivermanager: from 1.0.0 before 6.0.2.",
-  "severity": [
-    {
-      "type": "CVSS_V4",
-      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:H/SC:H/SI:L/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
-    }
-  ],
-  "affected": [],
-  "references": [
-    {
-      "type": "ADVISORY",
-      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4641"
-    },
-    {
-      "type": "WEB",
-      "url": "https://github.com/bonigarcia/webdrivermanager/pull/1458"
-    }
-  ],
-  "database_specific": {
-    "cwe_ids": [
-      "CWE-611"
-    ],
-    "severity": "CRITICAL",
-    "github_reviewed": false,
-    "github_reviewed_at": null,
-    "nvd_published_at": "2025-05-14T19:15:53Z"
-  }
-}