VULNERABILITY INTELLIGENCE
CVE-2025-12084
CVSS score6.3 MEDIUM
EPSS probability0.86%
CISA KEVNot currently listed
Published2025-12-03
Last modified2026-06-17
CVSS vectorCVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
Description
When building nested elements using xml.dom.minidom methods such as appendChild() that have a dependency on _clear_id_cache() the algorithm is quadratic. Availability can be impacted when building excessively nested documents.
Weakness classification
- CWE-407: Inefficient Algorithmic Complexity