Vulnerability · Published Jul 22, 2025 · Assigned by VulnCheck

CVE-2025-34142ETQ Reliance CG < SE.2025.1 / < 2025.1.2 XXE Injection in SSO SAML Handler

Medium 6.9

In plain English

A medium-severity XML external entity in Reliance CG (legacy) from ETQ. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.0% (higher than 62% of all known vulnerabilities).

Severity (CVSS 4.0)6.9Medium

Exploit odds (30 days)1.0%top 37.9% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

An XML External Entity (XXE) injection vulnerability exists in ETQ Reliance on the CG (legacy) platform within the `/resources/sessions/sso` endpoint. The SAML authentication handler processes XML input without disabling external entity resolution, allowing crafted SAML responses to invoke external entity references. This could enable attackers to retrieve sensitive files or perform server-side request forgery (SSRF). The issue was addressed by disabling external entity processing for the affected XML parser in versions SE.2025.1 and 2025.1.2.

Affected products (as reported)

Vendor	Product	Versions
ETQ	Reliance CG (legacy)	0 – before SE.2025.10 – before 2025.1.2

Weakness: CWE-611 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N

References

https://www.etq.com/product-overview/ product
https://www.etq.com/blog/etq-reliance-security-update/ vendor-advisory, patch
https://slcyber.io/assetnote-security-research-center/how-we-accidentally-discovered-a-remote-code-execution-vulnerability-in-etq-reliance/ technical-description
https://www.vulncheck.com/advisories/etq-reliance-cg-xxe-injection-in-sso-saml-handler-copy third-party-advisory