Beveiligingsadvies

CVE-2025-54992

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-08-11 21:34:48

Laatst bijgewerkt 2025-08-12 15:44:24

Toegewezen door GitHub_M

CVSS-score 6.9

Status PUBLISHED

Beschrijving

OpenKilda is an open-source OpenFlow controller. Prior to version 1.164.0, an XML external entity (XXE) injection vulnerability was found in OpenKilda which in combination with GHSL-2025-024 allows unauthenticated attackers to exfiltrate information from the instance where the OpenKilda UI is running. This issue may lead to Information disclosure. This issue has been patched in version 1.164.0.

← Alle CVE's bekijken Bekijk op cve.org ↗