CVE-2025-1781

MEDIO 6.5CVE-2025-1781 · Published 28/03/2025 · updated 17/06/2026

In breve

CVE-2025-1781 è una vulnerabilità MEDIO (CVSS 6.5) che riguarda css validator (w3).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.39%, superiore al 33.5% delle vulnerabilità.
Correzione: aggiornare a 20250226 o successiva.

Package	Affected versions	Patched versions
css validator w3	`< 20250226`	`20250226`

Description

There is a XXE in W3CSS Validator versions before cssval-20250226 that allows an attacker to use specially-crafted XML objects to coerce server-side request forgery (SSRF). This could be exploited to read arbitrary local files if an attacker has access to exception messages.

References

google/security-research security advisory · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free