Beveiligingsadvies

CVE-2025-25264

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-06-16 09:45:31
Laatst bijgewerkt 2025-11-21 11:36:54
Toegewezen door CERTVDE
CVSS-score 6.5
Status PUBLISHED

Beschrijving

An unauthenticated remote attacker can trick an admin to visit a website containing malicious java script code. The current overly permissive CORS policy allows the attacker to obtain any files from the file system.