Security Advisory
CVE-2025-25264
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
An unauthenticated remote attacker can trick an admin to visit a website containing malicious java script code. The current overly permissive CORS policy allows the attacker to obtain any files from the file system.