Executive brief
LocalS3 CreateBucketConfiguration Endpoint XML External Entity (XXE) Injection
Affected products
- Maven io.github.robothy:local-s3-rest
Junglewise Threat Intelligence
CVE-2025-27136 · Severity: medium · CVSS 4 · Published 2025-03-10
Technologies: io.github.robothy:local-s3-rest (Maven). Vendors: Maven.
LocalS3 CreateBucketConfiguration Endpoint XML External Entity (XXE) Injection