What is CVE-2025-65519?

CVE-2025-65519 is a medium-severity vulnerability in Mayswind Ezbookkeeping, classified under Uncontrolled Recursion. CVSS score: 6.5/10. Published 2026-02-18.

How severe is CVE-2025-65519?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Vulnerability in Mayswind Ezbookkeeping

CVE-2025-65519

mayswind ezbookkeeping versions 1.2.0 and earlier contain a critical vulnerability in JSON and XML file import processing. The application fails to validate nesting depth during parsing operations, allowing authenticated attackers to trigger denial of service conditions by uploading deeply nested malicious files. This results in CPU exhaustion, service degradation, or complete service unavailability.

EPSS: 0.003 (21.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.

Affected products

Mayswind Ezbookkeeping
N/a — versions n/a

Weakness classification (CWE)

CWE-674 — Uncontrolled Recursion

References

cve@mitre.org (Exploit, Third Party Advisory)

Frequently asked questions

What is CVE-2025-65519?: CVE-2025-65519 is a medium-severity vulnerability in Mayswind Ezbookkeeping, classified under Uncontrolled Recursion. CVSS score: 6.5/10. Published 2026-02-18.
How severe is CVE-2025-65519?: Medium severity. CVSS v3 base score is 6.5 out of 10.