Beveiligingsadvies

CVE-2025-40633

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-05-20 10:17:00

Laatst bijgewerkt 2025-05-20 13:19:41

Toegewezen door INCIBE

CVSS-score 5.1

Status PUBLISHED

Beschrijving

A Stored Cross-Site Scripting (XSS) vulnerability has been found in Koibox for versions prior to e8cbce2. This vulnerability allows an authenticated attacker to upload an image containing malicious JavaScript code as profile picture in the '/es/dashboard/clientes/ficha/' endpoint

← Alle CVE's bekijken Bekijk op cve.org ↗