CVE-2025-34490 | GFI MailEssentials up to 21.7 xml external entity reference

A vulnerability classified as critical was found in GFI MailEssentials up to 21.7. This vulnerability affects unknown code. The manipulation leads to xml external entity reference.

This vulnerability was named CVE-2025-34490. The attack can be initiated remotely. There is no exploit available.

It is recommended to upgrade the affected component.