Beveiligingsadvies

CVE-2025-0746

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-01-30 11:19:29

Laatst bijgewerkt 2025-02-18 19:02:02

Toegewezen door INCIBE

CVSS-score 6.1

Status PUBLISHED

Beschrijving

A Reflected Cross-Site Scripting vulnerability has been found in EmbedAI 2.1 and below. This vulnerability allows an authenticated attacker to craft a malicious URL leveraging the"/embedai/users/show/<SCRIPT>" endpoint to inject the malicious JavaScript code. This JavaScript code will be executed when a user opens the malicious URL.

← Alle CVE's bekijken Bekijk op cve.org ↗