Beveiligingsadvies

CVE-2019-25502

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-03-04 17:15:49
Laatst bijgewerkt 2026-07-28 01:46:54
Toegewezen door VulnCheck
CVSS-score 6.1
Status PUBLISHED

Beschrijving

Simple Job Script contains a cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the job_type_value parameter in the jobs endpoint. Attackers can craft requests with SVG payload injection to execute arbitrary JavaScript in victim browsers and steal session cookies or perform unauthorized actions.