Beveiligingsadvies

CVE-2025-15540

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-03-16 11:52:33

Laatst bijgewerkt 2026-03-16 14:20:16

Toegewezen door CERT-PL

CVSS-score 8.6

Status PUBLISHED

Beschrijving

"Functions" module in Raytha CMS allows privileged users to write custom code to add functionality to application. Due to a lack of sandboxing or access restrictions, JavaScript code executed through Raytha’s “functions” feature can instantiate .NET components and perform arbitrary operations within the application’s hosting environment. This issue was fixed in version 1.4.6.

← Alle CVE's bekijken Bekijk op cve.org ↗