CVE-2025-4639 HIGH

CVE-2025-4639: Improper Restriction of XML External Entity Reference in Peergos

Vendor Peergos

Product Peergos

Weakness CWE-611 · XXE

Published May 14, 2025

Last update May 14, 2025

View on NVD All CVEs

CVSS base score

8.8/10

Attack vector Network

Attack complexity Low

Privileges required None

User interaction None

Confidentiality —

Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:L/SC:L/SI:N/SA:N

What the vulnerability does

01Description

CWE-611 Improper Restriction of XML External Entity Reference in the getDocumentBuilder() method of WebDav servlet in Peergos. This issue affects Peergos through version 1.1.0.

Key dates

02Disclosure timeline

May 14, 2025 CVE published

May 14, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-4639 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/611.html

Related vulnerabilities

CVE-2025-4639: Improper Restriction of XML External Entity Reference in Peergos

01Description

02Disclosure timeline

03References

04Related CVE