Krm1/CVE-2025 huggingface dataset:
CVE-2025-0588 (N/A)
CVSS 4.0 score: 5.9 (MEDIUM)
In affected versions of Octopus Server it was possible for a user with sufficient access to set custom headers in all server responses. By submitting a specifically crafted referrer header the user could ensure that all subsequent server responses would return 500 errors rendering the site mostly unusable. The user would be able to subsequently set and unset the referrer header to control the denial of service state with a valid CSRF token whilst new CSRF tokens could not be generated.
CVE-2025-1231 (CWE-287)
CVSS 3.1 score: 5.4 (MEDIUM)
Improper password reset in PAM Module in Devolutions Server 2024.3.10.0 and earlier allows an authenticated user to reuse the oracle user password after check-in due to crash in the password reset functionality.
CVE-2025-26492 (CWE-522)
CVSS 3.1 score: 7.7 (HIGH)
In JetBrains TeamCity before 2024.12.2 improper Kubernetes connection settings could expose sensitive resources
CVE-2025-26493 (CWE-79)
CVSS 3.1 score: 4.6 (MEDIUM)
In JetBrains TeamCity before 2024.12.2 several DOM-based XSS were possible on the Code Inspection Report tab
CVE-2025-22467 (CWE-121)
CVSS 3.1 score: 9.9 (CRITICAL)
A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.6 allows a remote authenticated attacker to achieve remote code execution.
CVE-2025-24807 (CWE-345)
CVSS 4.0 score: 4.5 (MEDIUM)
eprosima Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group). Prior to versions 2.6.10, 2.10.7, 2.14.5, 3.0.2, 3.1.2, and 3.2.0, per design, PermissionsCA is not full chain validated, nor is the expiration date validated. Access control plugin validates only the S/MIME signature which causes an expired PermissionsCA to be taken as valid. Even though this issue is responsible for allowing `governance/permissions` from an expired PermissionsCA and having the system crash when PermissionsCA is not self-signed and contains the full-chain, the impact is low. Versions 2.6.10, 2.10.7, 2.14.5, 3.0.2, 3.1.2, and 3.2.0 contain a fix for the issue.
CVE-2025-24896 (CWE-613)
CVSS 3.1 score: 8.1 (HIGH)
Misskey is an open source, federated social media platform. Starting in version 12.109.0 and prior to version 2025.2.0-alpha.0, a login token named `token` is stored in a cookie for authentication purposes in Bull Dashboard, but this remains undeleted even after logout is performed. The primary affected users will be users who have logged into Misskey using a public PC or someone else's device, but it's possible that users who have logged out of Misskey before lending their PC to someone else could also be affected. Version 2025.2.0-alpha.0 contains a fix for this issue.
CVE-2025-24897 (CWE-352)
CVSS 3.1 score: 8.2 (HIGH)
Misskey is an open source, federated social media platform. Starting in version 12.109.0 and prior to version 2025.2.0-alpha.0, due to a lack of CSRF protection and the lack of proper security attributes in the authentication cookies of Bull's dashboard, some of the APIs of bull-board may be subject to CSRF attacks. There is a risk of this vulnerability being used for attacks with relatively large impact on availability and integrity, such as the ability to add arbitrary jobs. This vulnerability was fixed in 2025.2.0-alpha.0. As a workaround, block all access to the `/queue` directory with a web application firewall (WAF).
CVE-2025-24900 (CWE-352)
CVSS 3.1 score: 8.6 (HIGH)
Concorde, formerly know as Nexkey, is a fork of the federated microblogging platform Misskey. Due to a lack of CSRF countermeasures and improper settings of cookies for MediaProxy authentication, there is a vulnerability that allows MediaProxy authentication to be bypassed. In versions prior to 12.25Q1.1, the authentication cookie does not have the SameSite attribute. This allows an attacker to bypass MediaProxy authentication and load any image without restrictions under certain circumstances. In versions prior to 12.24Q2.3, this cookie was also used to authenticate the job queue management page (bull-board), so bull-board authentication is also bypassed. This may enable attacks that have a significant impact on availability and integrity.
The affected versions are too old to be covered by this advisory, but the maintainers of Concorde strongly recommend not using older versions. Version 12.25Q1.1 contains a patch. There is no effective workaround other than updating.
CVE-2025-24973 (CWE-613)
CVSS 3.1 score: 9.3 (CRITICAL)
Concorde, formerly know as Nexkey, is a fork of the federated microblogging platform Misskey. Prior to version 12.25Q1.1, due to an improper implementation of the logout process, authentication credentials remain in cookies even after a user has explicitly logged out, which may allow an attacker to steal authentication tokens. This could have devastating consequences if a user with admin privileges is (or was) using a shared device. Users who have logged in on a shared device should go to Settings > Security and regenerate their login tokens. Version 12.25Q1.1 fixes the issue. As a workaround, clear cookies and site data in the browser after logging out.
CVE-2025-24976 (CWE-639)
CVSS 4.0 score: 6.6 (MEDIUM)
Distribution is a toolkit to pack, ship, store, and deliver container content. Systems running registry versions 3.0.0-beta.1 through 3.0.0-rc.2 with token authentication enabled may be vulnerable to an issue in which token authentication allows an attacker to inject an untrusted signing key in a JSON web token (JWT). The issue lies in how the JSON web key (JWK) verification is performed. When a JWT contains a JWK header without a certificate chain, the code only checks if the KeyID (`kid`) matches one of the trusted keys, but doesn't verify that the actual key material matches. A fix for the issue is available at commit 5ea9aa028db65ca5665f6af2c20ecf9dc34e5fcd and expected to be a part of version 3.0.0-rc.3. There is no way to work around this issue without patching if the system requires token authentication.
CVE-2025-1126 (CWE-807)
CVSS 3.1 score: 9.3 (CRITICAL)
A Reliance on Untrusted Inputs in a Security Decision vulnerability has been identified in the Lexmark Print Management Client.
CVE-2025-21121 (CWE-787)
CVSS 3.1 score: 7.8 (HIGH)
InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2025-21123 (CWE-122)
CVSS 3.1 score: 7.8 (HIGH)
InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2025-21124 (CWE-125)
CVSS 3.1 score: 5.5 (MEDIUM)
InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2025-21125 (CWE-476)
CVSS 3.1 score: 5.5 (MEDIUM)
InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2025-21126 (CWE-20)
CVSS 3.1 score: 5.5 (MEDIUM)
InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by an Improper Input Validation vulnerability that could result in an application denial-of-service condition. An attacker could exploit this vulnerability to cause the application to crash, resulting in a denial of service. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2025-21157 (CWE-787)
CVSS 3.1 score: 7.8 (HIGH)
InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2025-21158 (CWE-191)
CVSS 3.1 score: 7.8 (HIGH)
InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2025-22399 (CWE-918)
CVSS 3.1 score: 7.9 (HIGH)
Dell UCC Edge, version 2.3.0, contains a Blind SSRF on Add Customer SFTP Server vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Server-side request forgery
CVE-2025-24470 (CWE-41)
CVSS 3.1 score: 8.6 (HIGH)
An Improper Resolution of Path Equivalence vulnerability [CWE-41] in FortiPortal 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.11 may allow a remote unauthenticated attacker to retrieve source code via crafted HTTP requests.
CVE-2025-24472 (CWE-288)
CVSS 3.1 score: 8.1 (HIGH)
An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting FortiOS 7.0.0 through 7.0.16 and FortiProxy 7.2.0 through 7.2.12, 7.0.0 through 7.0.19 may allow a remote attacker to gain super-admin privileges via crafted CSF proxy requests.
CVE-2025-21155 (CWE-476)
CVSS 3.1 score: 5.5 (MEDIUM)
Substance3D - Stager versions 3.1.0 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2025-21156 (CWE-191)
CVSS 3.1 score: 7.8 (HIGH)
InCopy versions 20.0, 19.5.1 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2025-21159 (CWE-416)
CVSS 3.1 score: 7.8 (HIGH)
Illustrator versions 29.1, 28.7.3 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2025-21160 (CWE-191)
CVSS 3.1 score: 7.8 (HIGH)
Illustrator versions 29.1, 28.7.3 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2025-21161 (CWE-787)
CVSS 3.1 score: 7.8 (HIGH)
Substance3D - Designer versions 14.0.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2025-21162 (CWE-379)
CVSS 3.1 score: 5.5 (MEDIUM)
Photoshop Elements versions 2025.0 and earlier are affected by a Creation of Temporary File in Directory with Incorrect Permissions vulnerability that could result in privilege escalation in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2025-21163 (CWE-121)
CVSS 3.1 score: 7.8 (HIGH)
Illustrator versions 29.1, 28.7.3 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2025-21179 (CWE-125)
CVSS 3.1 score: 4.8 (MEDIUM)
DHCP Client Service Denial of Service Vulnerability
CVE-2025-21181 (CWE-400)
CVSS 3.1 score: 7.5 (HIGH)
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
CVE-2025-21182 (CWE-415)
CVSS 3.1 score: 7.4 (HIGH)
Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability
CVE-2025-21183 (CWE-415)
CVSS 3.1 score: 7.4 (HIGH)
Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability
CVE-2025-21184 (CWE-122)
CVSS 3.1 score: 7.0 (HIGH)
Windows Core Messaging Elevation of Privileges Vulnerability
CVE-2025-21188 (CWE-59)
CVSS 3.1 score: 6.0 (MEDIUM)
Azure Network Watcher VM Extension Elevation of Privilege Vulnerability
CVE-2025-21190 (CWE-122)
CVSS 3.1 score: 8.8 (HIGH)
Windows Telephony Service Remote Code Execution Vulnerability
CVE-2025-21194 (CWE-20)
CVSS 3.1 score: 7.1 (HIGH)
Microsoft Surface Security Feature Bypass Vulnerability
CVE-2025-21198 (CWE-306)
CVSS 3.1 score: 9.0 (CRITICAL)
Microsoft High Performance Compute (HPC) Pack Remote Code Execution Vulnerability
CVE-2025-21200 (CWE-122)
CVSS 3.1 score: 8.8 (HIGH)
Windows Telephony Service Remote Code Execution Vulnerability
CVE-2025-21201 (CWE-415)
CVSS 3.1 score: 8.8 (HIGH)
Windows Telephony Server Remote Code Execution Vulnerability
CVE-2025-21206 (CWE-427)
CVSS 3.1 score: 7.3 (HIGH)
Visual Studio Installer Elevation of Privilege Vulnerability
CVE-2025-21208 (CWE-122)
CVSS 3.1 score: 8.8 (HIGH)
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVE-2025-21212 (CWE-125)
CVSS 3.1 score: 6.5 (MEDIUM)
Internet Connection Sharing (ICS) Denial of Service Vulnerability
CVE-2025-21216 (CWE-125)
CVSS 3.1 score: 6.5 (MEDIUM)
Internet Connection Sharing (ICS) Denial of Service Vulnerability
CVE-2025-21254 (CWE-125)
CVSS 3.1 score: 6.5 (MEDIUM)
Internet Connection Sharing (ICS) Denial of Service Vulnerability
CVE-2025-21259 (CWE-451)
CVSS 3.1 score: 5.3 (MEDIUM)
Microsoft Outlook Spoofing Vulnerability
CVE-2025-21322 (CWE-59)
CVSS 3.1 score: 7.8 (HIGH)
Microsoft PC Manager Elevation of Privilege Vulnerability
CVE-2025-21337 (CWE-284)
CVSS 3.1 score: 3.3 (LOW)
Windows NTFS Elevation of Privilege Vulnerability
CVE-2025-21347 (CWE-59)
CVSS 3.1 score: 6.0 (MEDIUM)
Windows Deployment Services Denial of Service Vulnerability
CVE-2025-21349 (CWE-287)
CVSS 3.1 score: 6.8 (MEDIUM)
Windows Remote Desktop Configuration Service Tampering Vulnerability
CVE-2025-21350 (CWE-20)
CVSS 3.1 score: 5.9 (MEDIUM)
Windows Kerberos Denial of Service Vulnerability
CVE-2025-21351 (CWE-400)
CVSS 3.1 score: 7.5 (HIGH)
Windows Active Directory Domain Services API Denial of Service Vulnerability
CVE-2025-21352 (CWE-400)
CVSS 3.1 score: 6.5 (MEDIUM)
Internet Connection Sharing (ICS) Denial of Service Vulnerability
CVE-2025-21358 (CWE-822)
CVSS 3.1 score: 7.8 (HIGH)
Windows Core Messaging Elevation of Privileges Vulnerability
CVE-2025-21359 (CWE-284)
CVSS 3.1 score: 7.8 (HIGH)
Windows Kernel Security Feature Bypass Vulnerability
CVE-2025-21367 (CWE-416)
CVSS 3.1 score: 7.8 (HIGH)
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
CVE-2025-21368 (CWE-122)
CVSS 3.1 score: 8.8 (HIGH)
Microsoft Digest Authentication Remote Code Execution Vulnerability
CVE-2025-21369 (CWE-122)
CVSS 3.1 score: 8.8 (HIGH)
Microsoft Digest Authentication Remote Code Execution Vulnerability
CVE-2025-21371 (CWE-122)
CVSS 3.1 score: 8.8 (HIGH)
Windows Telephony Service Remote Code Execution Vulnerability
CVE-2025-21373 (CWE-59)
CVSS 3.1 score: 7.8 (HIGH)
Windows Installer Elevation of Privilege Vulnerability
CVE-2025-21375 (CWE-20)
CVSS 3.1 score: 7.8 (HIGH)
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
CVE-2025-21376 (CWE-122)
CVSS 3.1 score: 8.1 (HIGH)
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
CVE-2025-21377 (CWE-73, NVD-CWE-noinfo)
CVSS 3.1 score: 6.5 (MEDIUM)
NTLM Hash Disclosure Spoofing Vulnerability
CVE-2025-21379 (CWE-416, NVD-CWE-noinfo)
CVSS 3.1 score: 7.1 (HIGH)
DHCP Client Service Remote Code Execution Vulnerability
CVE-2025-21381 (CWE-822, NVD-CWE-noinfo)
CVSS 3.1 score: 7.8 (HIGH)
Microsoft Excel Remote Code Execution Vulnerability
CVE-2025-21383 (CWE-125, CWE-125)
CVSS 3.1 score: 7.8 (HIGH)
Microsoft Excel Information Disclosure Vulnerability
CVE-2025-21386 (CWE-416, NVD-CWE-noinfo)
CVSS 3.1 score: 7.8 (HIGH)
Microsoft Excel Remote Code Execution Vulnerability
CVE-2025-21387 (CWE-416, NVD-CWE-noinfo)
CVSS 3.1 score: 7.8 (HIGH)
Microsoft Excel Remote Code Execution Vulnerability
CVE-2025-21390 (CWE-122, NVD-CWE-noinfo)
CVSS 3.1 score: 7.8 (HIGH)
Microsoft Excel Remote Code Execution Vulnerability
CVE-2025-21391 (CWE-59, NVD-CWE-noinfo)
CVSS 3.1 score: 7.1 (HIGH)
Windows Storage Elevation of Privilege Vulnerability
CVE-2025-21392 (CWE-416)
CVSS 3.1 score: 7.8 (HIGH)
Microsoft Office Remote Code Execution Vulnerability
CVE-2025-21394 (CWE-416, NVD-CWE-noinfo)
CVSS 3.1 score: 7.8 (HIGH)
Microsoft Excel Remote Code Execution Vulnerability
CVE-2025-21397 (CWE-416, NVD-CWE-noinfo)
CVSS 3.1 score: 7.8 (HIGH)
Microsoft Office Remote Code Execution Vulnerability
CVE-2025-21400 (CWE-285, NVD-CWE-noinfo)
CVSS 3.1 score: 8.0 (HIGH)
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2025-21406 (CWE-416, NVD-CWE-noinfo)
CVSS 3.1 score: 8.8 (HIGH)
Windows Telephony Service Remote Code Execution Vulnerability
CVE-2025-21407 (CWE-122, NVD-CWE-noinfo)
CVSS 3.1 score: 8.8 (HIGH)
Windows Telephony Service Remote Code Execution Vulnerability
CVE-2025-21410 (CWE-122, NVD-CWE-noinfo)
CVSS 3.1 score: 8.8 (HIGH)
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVE-2025-21414 (CWE-122, NVD-CWE-noinfo)
CVSS 3.1 score: 7.0 (HIGH)
Windows Core Messaging Elevation of Privileges Vulnerability
CVE-2025-21418 (CWE-122, NVD-CWE-noinfo)
CVSS 3.1 score: 7.8 (HIGH)
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
CVE-2025-21419 (CWE-59, NVD-CWE-noinfo)
CVSS 3.1 score: 7.1 (HIGH)
Windows Setup Files Cleanup Elevation of Privilege Vulnerability
CVE-2025-21420 (CWE-59, NVD-CWE-noinfo)
CVSS 3.1 score: 7.8 (HIGH)
Windows Disk Cleanup Tool Elevation of Privilege Vulnerability
CVE-2025-24036 (CWE-367, NVD-CWE-noinfo)
CVSS 3.1 score: 7.0 (HIGH)
Microsoft AutoUpdate (MAU) Elevation of Privilege Vulnerability
CVE-2025-24039 (CWE-427)
CVSS 3.1 score: 7.3 (HIGH)
Visual Studio Code Elevation of Privilege Vulnerability
CVE-2025-24042 (CWE-284)
CVSS 3.1 score: 7.3 (HIGH)
Visual Studio Code JS Debug Extension Elevation of Privilege Vulnerability
CVE-2025-24406 (CWE-22)
CVSS 3.1 score: 7.5 (HIGH)
Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to a security feature bypass. An attacker could exploit this vulnerability to modify files that are stored outside the restricted directory. Exploitation of this issue does not require user interaction.
CVE-2025-24407 (CWE-863)
CVSS 3.1 score: 7.1 (HIGH)
Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. An attacker could exploit this vulnerability to perform actions with permissions that were not granted. Exploitation of this issue does not require user interaction.
CVE-2025-24408 (CWE-200)
CVSS 3.1 score: 6.5 (MEDIUM)
Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Information Exposure vulnerability that could result in privilege escalation. A low-privileged attacker could gain unauthorized access to sensitive information. Exploitation of this issue does not require user interaction.
CVE-2025-24409 (CWE-285)
CVSS 3.1 score: 8.2 (HIGH)
Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11  and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access, leading to both confidentiality and integrity impact. Exploitation of this issue does not require user interaction.
CVE-2025-24410 (CWE-79)
CVSS 3.1 score: 8.7 (HIGH)
Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field. A successful attacker can abuse this to achieve session takeover, increasing the confidentiality and integrity impact as high.
CVE-2025-24411 (CWE-284)
CVSS 3.1 score: 8.1 (HIGH)
Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized access. Exploitation of this issue does not require user interaction.
CVE-2025-24412 (CWE-79)
CVSS 3.1 score: 8.7 (HIGH)
Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field. A successful attacker can abuse this to achieve session takeover, increasing the confidentiality and integrity impact as high.
CVE-2025-24413 (CWE-79)
CVSS 3.1 score: 8.7 (HIGH)
Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field. A successful attacker can abuse this to achieve session takeover, increasing the confidentiality and integrity impact as high.
CVE-2025-24414 (CWE-79)
CVSS 3.1 score: 8.7 (HIGH)
Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field. A successful attacker can abuse this to achieve session takeover, increasing the confidentiality and integrity impact as high.
CVE-2025-24415 (CWE-79)
CVSS 3.1 score: 8.7 (HIGH)
Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field. A successful attacker can abuse this to achieve session takeover, increasing the confidentiality and integrity impact as high.
CVE-2025-24416 (CWE-79)
CVSS 3.1 score: 8.7 (HIGH)
Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field. A successful attacker can abuse this to achieve session takeover, increasing the confidentiality and integrity impact as high.