Security Advisory

CVE-2025-41080

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-12-04 11:48:44

Last updated 2025-12-04 14:43:13

Assigner INCIBE

State PUBLISHED

Description

A stored Cross-Site Scripting (XSS) vulnerability has been found in Seafile v12.0.10. This vulnerability allows an attacker to execute arbitrary code in the victims browser by storing malicious payloads with POST parámetro p in /api/v2.1/repos/{repo_id}/file/.

← Browse all CVEs View on cve.org ↗