A vulnerability classified as problematic was found in Apache SIS up to 1.5. Impacted is an unknown function of the component XML File Handler. Such manipulation leads to xml external entity reference.
This vulnerability is uniquely identified as CVE-2025-68280. The attack can be launched remotely. No exploit exists.
Upgrading the affected component is advised.
