Security Advisory

CVE-2025-43708

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-04-17 00:00:00
Last updated 2025-04-17 19:22:56
Assigner mitre
CVSS score 3.3
State PUBLISHED

Description

VisiCut 2.1 allows stack consumption via an XML document with nested set elements, as demonstrated by a java.util.HashMap StackOverflowError when reference='../../../set/set[2]' is used, aka an "insecure deserialization" issue.