What is GHSA-pwm3-776c-8q7q?

GHSA-pwm3-776c-8q7q is a security advisory published by GitHub Security Advisories with Critical severity. BoniGarcia WebDriverManager Affected By Improper Restriction of XML External Entity Reference

Which CVE IDs does GHSA-pwm3-776c-8q7q cover?

GHSA-pwm3-776c-8q7q covers the following CVE IDs: CVE-2025-4641. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by GHSA-pwm3-776c-8q7q?

GHSA-pwm3-776c-8q7q affects 1 product, including: maven/io.github.bonigarcia:webdrivermanager:\u003e= 1.0.0, \u003c 6.1.0.

GHSA-pwm3-776c-8q7qCritical

BoniGarcia WebDriverManager Affected By Improper Restriction of XML External Entity Reference

Vendor

GitHub Security Advisories

Published

May 14, 2025

Last Modified

May 15, 2025

🔗 CVE IDs covered (1)

CVE-2025-4641 →

📋 Description

Improper Restriction of XML External Entity Reference vulnerability in bonigarcia webdrivermanager on Windows, MacOS, Linux (XML parsing components modules) allows Data Serialization External Entities Blowup. This vulnerability is associated with program files src/main/java/io/github/bonigarcia/wdm/WebDriverManager.java.

This issue affects webdrivermanager: from 1.0.0 before 6.1.0.

🎯 Affected products1

maven/io.github.bonigarcia:webdrivermanager:>= 1.0.0, < 6.1.0

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2025-4641
https://github.com/bonigarcia/webdrivermanager/pull/1458
https://github.com/advisories/GHSA-pwm3-776c-8q7q