Junglewise Threat Intelligence

CVE-2025-27136: LocalS3 CreateBucketConfiguration Endpoint XML External Entity (XXE) Injection

CVE-2025-27136 · Severity: medium · CVSS 4 · Published 2025-03-10

Technologies: io.github.robothy:local-s3-rest (Maven). Vendors: Maven.

Executive brief

LocalS3 CreateBucketConfiguration Endpoint XML External Entity (XXE) Injection

Affected products

  • Maven io.github.robothy:local-s3-rest

Related threats