Moole Vulnerability Database

Find real vulnerabilities before they ship

Low

CVE-2025-66372

Mustang before 2.16.3 allows exfiltrating files via XXE attacks.

VectorLOCAL

PublishedNov 28, 2025, 04:16

Published Bycve@mitre.org

Base Score

Score2.8

Package (Ecosystem)IntroducedFixedLimit

org.mustangproject:library(Maven)02.16.3N/A

org.mustangproject:validator(Maven)02.16.3N/A

CWE-611

Base Score

2.8

Vector String

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N

Base SeverityLow

Version

3.1

Attack Vector (AV)

LOCAL