https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T08:02:32.665823+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-10091 CVE-2025-10091 — Jinher OA XML Type xml external entity reference 2026-10-08T08:02:32.666974+00:00

Affected: Jinher OA

A vulnerability has been found in Jinher OA up to 1.2. This affects an unknown function of the file /c6/Jhsoft.Web.projectmanage/ProjectManage/XmlHttp.aspx/?Type=add of the component XML Handler. The manipulation leads to xml external entity reference. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.