Skip to main content

Exposed Dangerous Method or Function

CVE-2025-43955

Low
2.2/10

Summary

TwsCachedXPathAPI in Convertigo through 8.3.4 does not restrict the use of commons-jxpath APIs.

  • HIGH
  • LOCAL
  • LOW
  • UNCHANGED
  • REQUIRED
  • LOW
  • NONE
  • NONE

CWE-749 - Exposed Dangerous Method or Function

The software provides an Applications Programming Interface (API) or similar interface for interaction with external actors, but the interface includes a dangerous method or function that is not properly restricted.

References

Advisory Timeline

  • Published