Beveiligingsadvies

CVE-2025-50985

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-08-27 00:00:00

Laatst bijgewerkt 2025-08-27 15:12:25

Toegewezen door mitre

CVSS-score 5.6

Status PUBLISHED

Beschrijving

diskover-web v2.3.0 Community Edition is vulnerable to multiple reflected cross-site scripting (XSS) flaws in its web interface. Unsanitized GET parameters including maxage, maxindex, index, path, q (query), and doctype are directly echoed into the HTML response, allowing attackers to inject and execute arbitrary JavaScript when a victim visits a maliciously crafted URL.

← Alle CVE's bekijken Bekijk op cve.org ↗