CVE-2025-15251 beecue FastBee SIP Message ReqAbstractHandler.java getRootElement xml external entity reference
Remote attackers can exploit an XML External Entity vulnerability in the FastBee SIP message handler to read sensitive data or cause denial of service.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-15251?
CVE-2025-15251 is a medium-severity vulnerability in beecue FastBee, published on 30 Dec 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A vulnerability was detected in beecue FastBee up to 2.1. Impacted is the function getRootElement of the file springboot/fastbee-server/sip-server/src/main/java/com/fastbee/sip/handler/req/ReqAbstractHandler.java of the component SIP Message Handler. The manipulation results in xml external entity reference. It is possible to launch the attack remotely. A high complexity level is associated with this attack. The exploitability is considered difficult. The project owner replied to the issue report: "Okay, we'll handle it as soon as possible."
Which versions are affected by CVE-2025-15251?
How do I fix CVE-2025-15251?
No fix has been published for CVE-2025-15251 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-15251 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-15251 exists.
Sources
Also known as GHSA-5pmw-cmp3-g6wx.