XMLUtils in Kitodo.Production uses the default JAXP configuration, enabling XML External Entity processing. An attacker who can upload an EAD/XML file through the Create process dialog can supply a document that triggers an external entity. The server then resolves that entity, exposing local files to the attacker and allowing arbitrary outbound HTTP requests from the server to third‑party hosts. The resulting impact is a breach of confidentiality and potential network access beyond the application boundary. This flaw manifests as a high‑severity XML injection weakness (CWE‑611).

Kitodo in the kitodo:kitodo-production product line. All releases prior to version 3.9.2 are affected. The vulnerability is present in the XML parsing helpers parseXMLString, getNumberOfEADElements, and checkIfXmlIsWellFormed used in the EAD‑import path.

The CVSS score of 8.7 indicates a high risk assessment. Although EPSS data is not available, the lack of a KEV listing does not diminish the vulnerability’s potential exploitability; an authenticated user can trigger the flaw simply by uploading a crafted file. Because the flaw acts during file parsing, a malicious construct can be supplied through ordinary user privileges, making the attack relatively straightforward once access to the upload interface is achieved.