Security Advisory

CVE-2025-24345

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-04-30 11:35:44
Last updated 2025-04-30 14:44:15
Assigner bosch
State PUBLISHED

Description

A vulnerability in the “Hosts” functionality of the web application of ctrlX OS allows a remote authenticated (low-privileged) attacker to manipulate the “hosts” file in an unintended manner via a crafted HTTP request.