Beveiligingsadvies

CVE-2025-65465

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-03-02 00:00:00

Laatst bijgewerkt 2026-03-02 19:27:33

Toegewezen door mitre

CVSS-score 6.1

Status PUBLISHED

Beschrijving

A reflected Cross-Site Scripting (XSS) vulnerability in the RaiseError function of Skrol29 TbsZip version 2.17 and earlier allows remote attackers to execute arbitrary web script or HTML via a crafted payload in a filename parameter (e.g., to the FileRead function). This occurs because the error message is not properly sanitized before being output to the user. This vulnerability is fixed in version 2.18.

← Alle CVE's bekijken Bekijk op cve.org ↗