Security Advisory

CVE-2025-10092

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-09-08 11:32:06
Last updated 2025-09-08 13:33:31
Assigner VulDB
State PUBLISHED

Description

A vulnerability was found in Jinher OA up to 1.2. This impacts an unknown function of the file /c6/Jhsoft.Web.projectmanage/TaskManage/AddTask.aspx/?Type=add of the component XML Handler. The manipulation results in xml external entity reference. The attack can be executed remotely. The exploit has been made public and could be used.