Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
b.com/py-pdf/pypdf/security/advisories/GHSA-vr63-x8vc-m265 - https://github.com/py-pdf/pypdf/pull/3501 - https://github.com/py-pdf/pypdf/commit/f2864d6dd9bac7cecd3f4f54308b25ebbfa178f8 - https://github.com/py-pdf/pypdf/releases/tag/6.1.3
CVE ID: CVE-2025-62708 State: PUBLISHED Published: 2025-10-22T21:36:56.788Z Last Updated: 2025-10-23T15:10:58.953Z Vendors: py-pdf Products: pypdf Problem Types: CWE-409 Description: pypdf is a free and open-source pure-python PDF library. Prior to version 6.1.3, an attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires parsing the content stream of a page using the LZWDecode filter. This has been fixed in pypdf version 6.1.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/py-pdf/pypdf/security/advisories/GHSA-jfx9-29x2-rv3j - https://github.com/py-pdf/pypdf/pull/3502 - https://github.com/py-pdf/pypdf/commit/
ity/advisories/GHSA-jfx9-29x2-rv3j - https://github.com/py-pdf/pypdf/pull/3502 - https://github.com/py-pdf/pypdf/commit/e51d07807ffcdaf18077b9486dadb3dc05b368da - https://github.com/py-pdf/pypdf/releases/tag/6.1.3
CVE ID: CVE-2025-62709 State: PUBLISHED Published: 2025-11-20T16:50:03.193Z Last Updated: 2025-11-21T16:33:09.195Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N) Vendors: MacWarrior Products: clipbucket-v5 Problem Types: CWE-640 Description: ClipBucket v5 is an open source video sharing platform. In ClipBucket version 5.5.2, a change to network.class.php causes the application to dynamically build the server URL from the incoming HTTP Host header when the configuration base_url is not set. Because Host is a client-controlled header, an attacker can supply an arbitrary Host value. This allows an attacker to cause password-reset links (sent by forget.php) to be genera
supply an arbitrary Host value. This allows an attacker to cause password-reset links (sent by forget.php) to be generated with the attacker’s domain. If a victim follows that link and enters their activation code on the attacker-controlled domain, the attacker can capture the code and use it to reset the victim’s password and take over the account. This issue has been patched in version 5.5.2#162. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/MacWarrior/clipbucket-v5/security/advisories/GHSA-xhhf-mpqr-2cq5 - https://github.com/MacWarrior/clipbucket-v5/commit/1a93532e665217b5d329808ca78e37e59e9f8a9d
CVE ID: CVE-2025-62710 State: PUBLISHED Published: 2025-10-22T22:19:21.106Z Last Updated: 2025-10-24T18:28:07.317Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: sakaiproject Products: sakai Problem Types: CWE-337 Description: Sakai is a Collaboration and Learning Environment. Prior to versions 23.5 and 25.0, EncryptionUtilityServiceImpl initialized an AES256TextEncryptor password (serverSecretKey) using RandomStringUtils with the default java.util.Random. java.util.Random is a non‑cryptographic PRNG and can be predicted from limited state/seed information (e.g., start time window), substantially reducing the effective search space of the generated key. An
/seed information (e.g., start time window), substantially reducing the effective search space of the generated key. An attacker who can obtain ciphertexts (e.g., exported or at‑rest strings protected by this service) and approximate the PRNG seed can feasibly reconstruct the serverSecretKey and decrypt affected data. SAK-49866 is patched in Sakai 23.5, 25.0, and trunk. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/sakaiproject/sakai/security/advisories/GHSA-gr7h-xw4f-wh86 - https://github.com/sakaiproject/sakai/commit/bde070104b1de01f4a6458dca6d9e0880a0e3c04
CVE ID: CVE-2025-62711 State: PUBLISHED Published: 2025-10-24T21:54:52.578Z Last Updated: 2025-10-27T15:22:22.914Z Vendors: bytecodealliance Products: wasmtime Problem Types: CWE-755 Description: Wasmtime is a runtime for WebAssembly. In versions from 38.0.0 to before 38.0.3, the implementation of component-model related host-to-wasm trampolines in Wasmtime contained a bug where it's possible to carefully craft a component, which when called in a specific way, would crash the host with a segfault or assert failure. Wasmtime 38.0.3 has been released and is patched to fix this issue. There are no workarounds. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/b
s issue. There are no workarounds. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-4h67-722j-5pmc - https://github.com/bytecodealliance/wasmtime/pull/11592 - https://github.com/bytecodealliance/wasmtime/commit/192f2fcdadfec9d0cf6b58548a85a7307450cbf5
CVE ID: CVE-2025-62712 State: PUBLISHED Published: 2025-10-30T16:08:32.669Z Last Updated: 2025-10-31T17:42:40.815Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N) Vendors: jumpserver Products: jumpserver Problem Types: CWE-862 Description: JumpServer is an open source bastion host and an operation and maintenance security audit system. In JumpServer versions prior to v3.10.20-lts and v4.10.11-lts, an authenticated, non-privileged user can retrieve connection tokens belonging to other users via the super-connection API endpoint (/api/v1/authentication/super-connection-token/). When accessed from a web browser, this endpoint returns connection tokens created by all u
ion/super-connection-token/). When accessed from a web browser, this endpoint returns connection tokens created by all users instead of restricting results to tokens owned by or authorized for the requester. An attacker who obtains these tokens can use them to initiate connections to managed assets on behalf of the original token owners, resulting in unauthorized access and privilege escalation across sensitive systems. This vulnerability is fixed in v3.10.20-lts and v4.10.11-lts. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/jumpserver/jumpserver/security/advisories/GHSA-6ghx-6vpv-3wg7 - https://github.com/jumpserver/jumpserver/commit/453ad331eec9d9667a
/jumpserver/security/advisories/GHSA-6ghx-6vpv-3wg7 - https://github.com/jumpserver/jumpserver/commit/453ad331eec9d9667a38de735d6612608e558491
CVE ID: CVE-2025-62713 State: PUBLISHED Published: 2025-10-23T16:15:14.696Z Last Updated: 2025-10-23T16:40:52.174Z Vendors: kottster Products: kottster Problem Types: CWE-284, CWE-78 Description: Kottster is a self hosted Node.js admin panel. From versions 3.2.0 to before 3.3.2, Kottster contains a pre-authentication remote code execution (RCE) vulnerability when running in development mode. This affects development mode only, production deployments were never affected. This issue has been fixed in version 3.3.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/kottster/kottster/security/advisories/GHSA-j3w7-9qc3-g96p - https://github.com/kottster/kottster/
: - https://github.com/kottster/kottster/security/advisories/GHSA-j3w7-9qc3-g96p - https://github.com/kottster/kottster/commit/0a7d24922a23aac98372155348787670937eef89
CVE ID: CVE-2025-62714 State: PUBLISHED Published: 2025-10-24T15:41:59.899Z Last Updated: 2025-10-24T17:29:39.462Z Vendors: karmada-io Products: dashboard Problem Types: CWE-862 Description: Karmada Dashboard is a general-purpose, web-based control panel for Karmada which is a multi-cluster management project. Prior to version 0.2.0, there is an authentication bypass vulnerability in the Karmada Dashboard API. The backend API endpoints (e.g., /api/v1/secret, /api/v1/service) did not enforce authentication, allowing unauthenticated users to access sensitive cluster information such as Secrets and Services directly. Although the web UI required a valid JWT for access, the API itself remained e
on such as Secrets and Services directly. Although the web UI required a valid JWT for access, the API itself remained exposed to direct requests without any authentication checks. Any user or entity with network access to the Karmada Dashboard service could exploit this vulnerability to retrieve sensitive data. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/karmada-io/dashboard/security/advisories/GHSA-5qjg-9mjh-4r92 - https://github.com/karmada-io/dashboard/pull/271 - https://github.com/karmada-io/dashboard/pull/280 - https://github.com/karmada-io/dashboard/commit/8457b8bb87725e2371a638ca5a255fd2895c70f1 - https://github.com/karmada-io/dashboard/commit/
m/karmada-io/dashboard/commit/8457b8bb87725e2371a638ca5a255fd2895c70f1 - https://github.com/karmada-io/dashboard/commit/d2d04909f25e96b4c20fa6b636c398bd1636ee06 - https://github.com/karmada-io/dashboard/releases/tag/v0.2.0
CVE ID: CVE-2025-62715 State: PUBLISHED Published: 2025-11-04T21:37:32.650Z Last Updated: 2025-11-04T21:45:26.091Z Vendors: MacWarrior Products: clipbucket-v5 Problem Types: CWE-79 Description: ClipBucket v5 is an open source video sharing platform. Versions 5.5.2-#147 and below contain a stored Cross-Site Scripting (XSS) vulnerability in ClipBucket’s Collection tags feature. An authenticated normal user can create a tag containing HTML or JavaScript, which is later rendered unescaped in collection detail and tag-list pages. As a result, arbitrary JavaScript executes in the browsers of all users who view the affected pages. This issue is fixed in version 5.5.2-#152. Additional Analyst Notes:
browsers of all users who view the affected pages. This issue is fixed in version 5.5.2-#152. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/MacWarrior/clipbucket-v5/security/advisories/GHSA-h5f4-wj75-39x3 - https://github.com/MacWarrior/clipbucket-v5/commit/8e3cf79ce2721fbebde68a05a9a1a6319f086bcc
CVE ID: CVE-2025-62716 State: PUBLISHED Published: 2025-10-24T20:06:18.446Z Last Updated: 2025-10-24T20:28:13.981Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N) Vendors: makeplane Products: plane Problem Types: CWE-79, CWE-601 Description: Plane is open-source project management software. Prior to version 1.1.0, an open redirect vulnerability in the ?next_path query parameter allows attackers to supply arbitrary schemes (e.g., javascript:) that are passed directly to router.push. This results in a cross-site scripting (XSS) vulnerability, enabling attackers to execute arbitrary JavaScript in the victim’s browser. The issue can be exploited without authentication and
ttackers to execute arbitrary JavaScript in the victim’s browser. The issue can be exploited without authentication and has severe impact, including information disclosure, and privilege escalation and modifications of administrative settings. This issue has been patched in version 1.1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/makeplane/plane/security/advisories/GHSA-6fj7-xgpg-mj6f
CVE ID: CVE-2025-62717 State: PUBLISHED Published: 2025-10-24T20:13:47.407Z Last Updated: 2025-10-24T20:34:16.932Z Vendors: emlog Products: emlog Problem Types: CWE-287 Description: Emlog is an open source website building system. In version 2.5.23, Emlog Pro is vulnerable to a session verification code error due to a clearing logic error. This means the verification code could be reused anywhere an email verification code is required. This issue has been fixed in commit 1f726df. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/emlog/emlog/security/advisories/GHSA-wwj4-ppfj-hcm6 - https://github.com/emlog/emlog/commit/1f726df0ce56a1bc6e8225dd95389974173bd0c
/security/advisories/GHSA-wwj4-ppfj-hcm6 - https://github.com/emlog/emlog/commit/1f726df0ce56a1bc6e8225dd95389974173bd0c0
CVE ID: CVE-2025-62719 State: PUBLISHED Published: 2025-11-04T21:57:15.828Z Last Updated: 2025-11-05T18:48:18.084Z Vendors: Kovah Products: LinkAce Problem Types: CWE-918 Description: LinkAce is a self-hosted archive to collect website links. In versions 2.3.0 and below, the htmlKeywordsFromUrl function in the FetchController class accepts user-provided URLs and makes HTTP requests to them without validating that the destination is not an internal or private network resource. This Server-Side Request Forgery (SSRF) vulnerability allows authenticated attackers to use the application server to perform port scanning and service discovery on internal networks. Practical impact is very limited be
lication server to perform port scanning and service discovery on internal networks. Practical impact is very limited because the function only extracts content from HTML meta keywords tags, which prevents meaningful data exfiltration from databases, APIs, or cloud metadata endpoints. This issue is fixed in version 2.4.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Kovah/LinkAce/security/advisories/GHSA-473x-rmm6-mc8c - https://github.com/Kovah/LinkAce/commit/4e0b822163ccefc2640c283ae969a39e673a0619 - http://github.com/Kovah/LinkAce/releases/tag/v2.4.0
CVE ID: CVE-2025-62720 State: PUBLISHED Published: 2025-11-04T22:03:09.147Z Last Updated: 2025-11-05T18:48:12.856Z Vendors: Kovah Products: LinkAce Problem Types: CWE-200, CWE-284 Description: LinkAce is a self-hosted archive to collect website links. Versions 2.3.1 and below allow any authenticated user to export the entire database of links from all users in the system, including private links that should only be accessible to their owners. The HTML and CSV export functions in the ExportController class retrieve all links without applying any ownership or visibility filtering, effectively bypassing all access controls implemented elsewhere in the application. This issue is fixed in version
ring, effectively bypassing all access controls implemented elsewhere in the application. This issue is fixed in version 2.4.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Kovah/LinkAce/security/advisories/GHSA-cqxv-6v28-2f2h - https://github.com/Kovah/LinkAce/commit/0ba49dba5176db390999de1f90b9d743a4aedc24 - https://github.com/Kovah/LinkAce/releases/tag/v2.4.0
CVE ID: CVE-2025-62721 State: PUBLISHED Published: 2025-11-04T22:07:09.103Z Last Updated: 2025-11-05T18:48:07.596Z Vendors: Kovah Products: LinkAce Problem Types: CWE-200, CWE-284 Description: LinkAce is a self-hosted archive to collect website links. In versions 2.3.1 and below, authenticated RSS feed endpoints in the FeedController class fail to implement proper authorization checks, allowing any authenticated user to access all links, lists, and tags from all users in the system, regardless of their ownership or visibility settings. This issue is fixed in version 2.4.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Kovah/LinkAce/security/advisories/GH
Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Kovah/LinkAce/security/advisories/GHSA-47g2-qw6q-cr96 - https://github.com/Kovah/LinkAce/commit/1fef32694cee2bd80892fb478416be9364c3fddd - https://github.com/Kovah/LinkAce/releases/tag/v2.4.0
CVE ID: CVE-2025-62722 State: PUBLISHED Published: 2025-11-04T22:31:46.582Z Last Updated: 2025-11-05T18:48:01.239Z Vendors: Kovah Products: LinkAce Problem Types: CWE-79 Description: LinkAce is a self-hosted archive to collect website links. In versions 2.3.1 and below, the social media sharing functionality contains a Stored Cross-Site Scripting (XSS) vulnerability that allows any authenticated user to inject arbitrary JavaScript by creating a link with malicious HTML in the title field. When a user views the link details page and the shareable links are rendered, the malicious JavaScript executes in their browser. This vulnerability affects multiple sharing services and can be exploited to
cious JavaScript executes in their browser. This vulnerability affects multiple sharing services and can be exploited to steal session cookies, perform actions on behalf of users, or deliver malware. This issue is fixed in version 2.4.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Kovah/LinkAce/security/advisories/GHSA-4mxh-7c7f-q79j - https://github.com/Kovah/LinkAce/commit/95d29b71ad9d4750cff8bbe7488802f6a4afa6aa - https://github.com/Kovah/LinkAce/releases/tag/v2.4.0
CVE ID: CVE-2025-62723 State: PUBLISHED Published: 2025-10-24T20:16:34.047Z Last Updated: 2025-10-24T20:32:00.596Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: halfgaar Products: FlashMQ Problem Types: CWE-772 Description: FlashMQ is a MQTT broker/server, designed for multi-CPU environments. Prior to version 1.23.2, any authenticated user can create sessions and have them collect QoS messages. When not sent to a client, these are then not released upon (eventual) session expiration. Version 1.23.2 fixes the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/halfgaar/FlashMQ/security/advisories/GHSA-7mhp-22q4-r6vv -
s: - CISA ADP Vulnrichment: References: - https://github.com/halfgaar/FlashMQ/security/advisories/GHSA-7mhp-22q4-r6vv - https://github.com/halfgaar/FlashMQ/issues/154 - https://github.com/halfgaar/FlashMQ/commit/e86c49360ef4387440c97f591770cdb9284b4ee9
CVE ID: CVE-2025-62724 State: PUBLISHED Published: 2025-11-20T16:53:13.495Z Last Updated: 2025-11-21T16:56:40.807Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: OSC Products: ondemand Problem Types: CWE-61, CWE-367 Description: Open OnDemand is an open-source HPC portal. Prior to versions 4.0.8 and 3.1.16, users can craft a "Time of Check to Time of Use" (TOCTOU) attack when downloading zip files to access files outside of the OOD_ALLOWLIST. This vulnerability impacts sites that use the file browser allowlists in all current versions of OOD. However, files accessed are still protected by the UNIX permissions. Open OnDemand versions 4.0.8 and 3.1.16 have be
OD. However, files accessed are still protected by the UNIX permissions. Open OnDemand versions 4.0.8 and 3.1.16 have been patched for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/OSC/ondemand/security/advisories/GHSA-vjpg-34px-gjrw
CVE ID: CVE-2025-62725 State: PUBLISHED Published: 2025-10-27T20:37:32.340Z Last Updated: 2025-10-28T14:47:42.196Z Vendors: docker Products: compose Problem Types: CWE-22 Description: Docker Compose trusts the path information embedded in remote OCI compose artifacts. When a layer includes the annotations com.docker.compose.extends or com.docker.compose.envfile, Compose joins the attacker‑supplied value from com.docker.compose.file/com.docker.compose.envfile with its local cache directory and writes the file there. This affects any platform or workflow that resolves remote OCI compose artifacts, Docker Desktop, standalone Compose binaries on Linux, CI/CD runners, cloud dev environments is af
OCI compose artifacts, Docker Desktop, standalone Compose binaries on Linux, CI/CD runners, cloud dev environments is affected. An attacker can escape the cache directory and overwrite arbitrary files on the machine running docker compose, even if the user only runs read‑only commands such as docker compose config or docker compose ps. This issue is fixed in v2.40.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/docker/compose/security/advisories/GHSA-gv8h-7v7w-r22q - https://github.com/docker/compose/commit/69bcb962bfb2ea53b41aa925333d356b577d6176
CVE ID: CVE-2025-62726 State: PUBLISHED Published: 2025-10-30T16:24:11.484Z Last Updated: 2025-10-31T18:19:31.619Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: n8n-io Products: n8n Problem Types: CWE-829 Description: n8n is an open source workflow automation platform. Prior to 1.113.0, a remote code execution vulnerability exists in the Git Node component available in both Cloud and Self-Hosted versions of n8n. When a malicious actor clones a remote repository containing a pre-commit hook, the subsequent use of the Commit operation in the Git Node can inadvertently trigger the hook’s execution. This allows attackers to execute arbitrary code within the n8n
Git Node can inadvertently trigger the hook’s execution. This allows attackers to execute arbitrary code within the n8n environment, potentially compromising the system and any connected credentials or workflows. This vulnerability is fixed in 1.113.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/n8n-io/n8n/security/advisories/GHSA-xgp7-7qjq-vg47 - https://github.com/n8n-io/n8n/pull/19559 - https://github.com/n8n-io/n8n/commit/5bf3db5ba84d3195bbe11bbd3c62f7086e090997
CVE ID: CVE-2025-62727 State: PUBLISHED Published: 2025-10-28T20:14:53.655Z Last Updated: 2025-11-04T17:41:42.316Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Kludex Products: starlette Problem Types: CWE-407 Description: Starlette is a lightweight ASGI framework/toolkit. Starting in version 0.39.0 and prior to version 0.49.1 , an unauthenticated attacker can send a crafted HTTP Range header that triggers quadratic-time processing in Starlette's FileResponse Range parsing/merging logic. This enables CPU exhaustion per request, causing denial‑of‑service for endpoints serving files (e.g., StaticFiles or any use of FileResponse). This vulnerability is fixed i
ial‑of‑service for endpoints serving files (e.g., StaticFiles or any use of FileResponse). This vulnerability is fixed in 0.49.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Kludex/starlette/security/advisories/GHSA-7f5h-v6xp-fcq8 - https://github.com/Kludex/starlette/commit/4ea6e22b489ec388d6004cfbca52dd5b147127c5 - https://github.com/Kludex/starlette/commit/69ed26a85956ef4bd0161807eb27abf49be7cd3c - https://github.com/Kludex/starlette/releases/tag/0.49.1
CVE ID: CVE-2025-62729 State: PUBLISHED Published: 2025-11-20T15:43:59.279Z Last Updated: 2025-11-20T21:24:30.804Z Vendors: SOPlanning Products: SOPlanning Problem Types: CWE-79 Description: SOPlanning is vulnerable to Stored XSS in /status endpoint. Malicious attacker with an account can inject arbitrary HTML and JS into website, which will be rendered/executed when opening multiple pages. This issue was fixed in version 1.55. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert.pl/en/posts/2025/11/CVE-2025-62293 - https://www.soplanning.org/en/
CVE ID: CVE-2025-62730 State: PUBLISHED Published: 2025-11-20T15:44:09.430Z Last Updated: 2025-11-20T21:24:56.253Z Vendors: SOPlanning Products: SOPlanning Problem Types: CWE-863 Description: SOPlanning is vulnerable to Privilege Escalation in user management tab. Users with user_manage_team role are allowed to modify permissions of users. However, they are able to assign administrative permissions to any user including themselves. This allow a malicious authenticated attacker with this role to escalate to admin privileges. This issue affects both Bulk Update functionality and regular edition of user's right and privileges. This issue was fixed in version 1.55. Additional Analyst Notes: - CI
and regular edition of user's right and privileges. This issue was fixed in version 1.55. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert.pl/en/posts/2025/11/CVE-2025-62293 - https://www.soplanning.org/en/
CVE ID: CVE-2025-62731 State: PUBLISHED Published: 2025-11-20T15:44:17.319Z Last Updated: 2025-11-21T16:24:55.256Z Vendors: SOPlanning Products: SOPlanning Problem Types: CWE-79 Description: SOPlanning is vulnerable to Stored XSS in /feries endpoint. Malicious attacker with access to public holidays feature is able to inject arbitrary HTML and JS into website, which will be rendered/executed when opening multiple pages. By default only administrators and users with special privileges are able to access this endpoint. This issue was fixed in version 1.55. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert.pl/en/posts/2025/11/CVE-2025-62293 - https://www.soplanning.o
Notes: - CISA ADP Vulnrichment: References: - https://cert.pl/en/posts/2025/11/CVE-2025-62293 - https://www.soplanning.org/en/