CVE-2025-43708
CVSS 3.1 Score 3.3 of 10 (low)
Details
Published Apr 17, 2025
CWE ID 674
Summary
CVE-2025-43708 is a vulnerability affecting VisiCut 2.1 software. This issue allows for stack consumption through an insecure deserialization process, specifically with XML documents containing nested set elements. An attacker can trigger a java.util.HashMap StackOverflowError by using a reference of '../../../set/set[2]'. This vulnerability can lead to denial of service or potentially more severe consequences. Users are urged to update their VisiCut software to a secure version to prevent exploitation.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.