Beveiligingsadvies

CVE-2025-41079

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-12-04 11:48:10

Laatst bijgewerkt 2025-12-04 14:44:00

Toegewezen door INCIBE

CVSS-score 5.1

Status PUBLISHED

Beschrijving

A stored Cross-Site Scripting (XSS) vulnerability has been found in Seafile v12.0.10. This vulnerability allows an attacker to execute arbitrary code in the victim's browser by storing malicious payloads with PUT parámetro 'name' in '/api/v2.1/user/'.

← Alle CVE's bekijken Bekijk op cve.org ↗