Beveiligingsadvies

CVE-2025-62369

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-11-04 21:18:38

Laatst bijgewerkt 2025-11-05 14:29:33

Toegewezen door GitHub_M

CVSS-score 7.2

Status PUBLISHED

Beschrijving

Xibo is an open source digital signage platform with a web content management system (CMS). Versions 4.3.0 and below contain a Remote Code Execution vulnerability in the CMS Developer menu's Module Templating functionality, allowing authenticated users with "System -> Add/Edit custom modules and templates" permissions to manipulate Twig filters and execute arbitrary server-side functions as the web server user. This issue is fixed in version 4.3.1. To workaround this issue, use the 4.1 and 4.2 patch commits.

← Alle CVE's bekijken Bekijk op cve.org ↗