bonigarcia WebDriverManager XML External Entity Processing Vulnerability

A vulnerability allowing improper restriction of XML external entity references has been identified in bonigarcia WebDriverManager versions 1.0.0 prior to 6.0.2. This issue is present on Windows, MacOS, and Linux, where the XML parsing components can be exploited to cause data serialization external entity blowup. The vulnerability arises from the WebDriverManager's XML parsing function, which could be manipulated to access local files or perform server-side request forgery (SSRF) attacks.

Impact

Exploitation of this vulnerability could lead to an XML external entity (XXE) attack, allowing an attacker to manipulate XML data processing to access local files or potentially conduct SSRF attacks.

Remediation

Users can update to bonigarcia WebDriverManager version 6.0.2 or later to address this vulnerability.