CVE-2025-35112

Publication date

2025-08-26 22:19:20

Family

cisa-cg

State

PUBLISHED

Description

Agiloft Release 28 contains an XML External Entities vulnerability in any table that allows import/export, allowing an authenticated attacker to import the template file and perform path traversal on the local system files. Users should upgrade to Agiloft Release 31.