PT-2025-4837 · Ambari · Ambari

Viraj Jasani · Published 2025-01-21 · Updated 2025-01-22 · CVE-2025-23195

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Ambari versions prior to 2.7.9

Description An XML External Entity (XXE) issue exists, allowing an attacker to inject malicious XML entities due to insecure parsing of XML input using the DocumentBuilderFactory class without disabling external entity resolution. This can be exploited to read arbitrary files on the server or perform server-side request forgery (SSRF) attacks.

Recommendations For Ambari versions prior to 2.7.9, update to Ambari 2.7.9 or later to resolve the issue. As a temporary workaround, consider disabling the use of the DocumentBuilderFactory class or restrict its functionality to minimize the risk of exploitation.

Fix

XXE

Weakness Enumeration

CWE-611

Related Identifiers

CVE-2025-23195

Affected Products

Ambari

References · 8

• https://lists.apache.org/thread/hsb6mvxd7g37dq1ygtd0pd88gs9tfcwq · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-23195 · Security Note
• https://osv.dev/vulnerability/CVE-2025-23195 · Vendor Advisory
• http://openwall.com/lists/oss-security/2025/01/21/7 · Vendor Advisory
• https://t.me/cvedetector/16031 · Telegram Post
• https://t.me/cvenotify/108219 · Telegram Post
• https://t.me/cvenotify/108169 · Telegram Post
• https://twitter.com/CVEnew/status/1881821711638864045 · Twitter Post