CVE-2025-4641: BoniGarcia WebDriverManager Affected By Improper Restriction of XML External Entity Reference
Improper Restriction of XML External Entity Reference vulnerability in bonigarcia webdrivermanager on Windows, MacOS, Linux (XML parsing components modules) allows Data Serialization External Entities Blowup. This vulnerability is associated with program files src/main/java/io/github/bonigarcia/wdm/WebDriverManager.java. This issue affects webdrivermanager: from 1.0.0 before 6.1.0.
Published May 14, 2025 · Updated May 15, 2025
Affected packages
io.github.bonigarcia:webdrivermanager
- Ecosystem
- Maven
- Affected
- >= 1.0.0, < 6.1.0
- Fixed in
- 6.1.0
- Check
mvn dependency:tree -Dincludes=io.github.bonigarcia:webdrivermanager
Advisory details
From the GitHub Advisory Database (CC BY 4.0).
Improper Restriction of XML External Entity Reference vulnerability in bonigarcia webdrivermanager on Windows, MacOS, Linux (XML parsing components modules) allows Data Serialization External Entities Blowup. This vulnerability is associated with program files src/main/java/io/github/bonigarcia/wdm/WebDriverManager.java.
This issue affects webdrivermanager: from 1.0.0 before 6.1.0.
References
How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology