CVE-2025-8355 — In Xerox FreeFlow Core version 8.0.4, improper handling of XML input allows injection of external entities. An attacker can craft malicious XML containing references to internal URLs, this results in — CVE Database · The Intelligence Room