deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-9103
Published: 2025-08-18
Description: A vulnerability was detected in ZenCart 2.1.0. Affected by this vulnerability is an unknown functionality of the component CKEditor. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The real existence of this vulnerability is still doubted at the moment. The vendor declares this as "intended behavior, allowed for authorized administrators".
CVSS Score: 2.4 (LOW)
CWE: CWE-79, CWE-94
References: https://gist.github.com/0xHamy/b2674eeffd1f73af96d29f152c47bcbd; https://hkohi.ca/vulnerability/28; https://vuldb.com/?ctiid.320425
CVE: CVE-2025-9104
Published: 2025-08-18
Description: A flaw has been found in Portabilis i-Diario up to 1.5.0. The affected element is an unknown function of the file /planos-de-aulas-por-disciplina/ of the component Informações Adicionais Page. This manipulation of the argument Parecer/Objeto de Conhecimento/Habilidades causes cross site scripting. Remote exploitation of the attack is possible. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-94
References: https://github.com/marcelomulder/CVE/blob/main/i-diario/CVE-2025-9104.md; https://github.com/marcelomulder/CVE/blob/main/i-diario/Stored%20XSS%20endpoint%20planos-de-aulas-por-disciplina.(ID)%20in%20multiples%20parameters.md#poc; https://vuldb.com/?ctiid.320426
CVE: CVE-2025-9105
Published: 2025-08-18
Description: A vulnerability has been found in Portabilis i-Diario up to 1.5.0. The impacted element is an unknown function of the file /planos-de-ensino-por-areas-de-conhecimento/ of the component Informações Adicionais Page. Such manipulation of the argument Parecer/Conteúdos/Objetivos leads to cross site scripting. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-94
References: https://github.com/marcelomulder/CVE/blob/main/i-diario/CVE-2025-9105.md; https://github.com/marcelomulder/CVE/blob/main/i-diario/Stored%20XSS%20endpoint%20planos-de-ensino-por-areas-de-conhecimento.(ID)%20in%20multiples%20parameters.md#poc; https://vuldb.com/?ctiid.320427
CVE: CVE-2025-9106
Published: 2025-08-18
Description: A vulnerability was found in Portabilis i-Diario up to 1.5.0. This affects an unknown function of the file /planos-de-ensino-por-disciplina/ of the component Informações Adicionais Page. Performing manipulation of the argument Parecer/Conteúdos/Objetivos results in cross site scripting. The attack is possible to be carried out remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-94
References: https://github.com/marcelomulder/CVE/blob/main/i-diario/CVE-2025-9106%20.md; https://github.com/marcelomulder/CVE/blob/main/i-diario/Stored%20XSS%20endpoint%20planos-de-ensino-por-disciplina.(ID)%20in%20multiples%20parameters.md#poc; https://vuldb.com/?ctiid.320428
CVE: CVE-2025-9107
Published: 2025-08-18
Description: A vulnerability was determined in Portabilis i-Diario up to 1.5.0. This impacts an unknown function of the file /alunos/search_autocomplete. Executing manipulation of the argument q can lead to cross site scripting. The attack may be performed from a remote location. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79, CWE-94
References: https://github.com/marcelomulder/CVE/blob/main/i-diario/CVE-2025-9107.md; https://github.com/marcelomulder/CVE/blob/main/i-diario/Reflected%20XSS%20endpoint%20search_autocomplete%20parameter%20q.md#poc; https://vuldb.com/?ctiid.320429
CVE: CVE-2025-9108
Published: 2025-08-18
Description: Affected is an unknown function of the component Login Page. The manipulation leads to improper restriction of rendered ui layers. It is possible to launch the attack remotely.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-1021
References: https://vuldb.com/?ctiid.320430; https://vuldb.com/?id.320430; https://vuldb.com/?submit.627923
CVE: CVE-2025-9109
Published: 2025-08-18
Description: A security flaw has been discovered in Portabilis i-Diario up to 1.5.0. Affected by this vulnerability is an unknown functionality of the file /password/email of the component Password Recovery Endpoint. The manipulation results in observable response discrepancy. It is possible to launch the attack remotely. This attack is characterized by high complexity. The exploitation appears to be difficult. The exploit has been released to the public and may be exploited.
CVSS Score: 3.7 (LOW)
CWE: CWE-203, CWE-204
References: https://vuldb.com/?ctiid.320431; https://vuldb.com/?id.320431; https://vuldb.com/?submit.627926
CVE: CVE-2025-57700
Published: 2025-08-18
Description: DIAEnergie - Stored Cross-site Scripting
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://filecenter.deltaww.com/news/download/doc/Delta-PCSA-2025-00012_DIAEnergie%20Cross-Site%20Scripting%20Vulnerabilities.pdf
CVE: CVE-2025-57701
Published: 2025-08-18
Description: DIAEnergie - Reflected Cross-site Scripting
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://filecenter.deltaww.com/news/download/doc/Delta-PCSA-2025-00012_DIAEnergie%20Cross-Site%20Scripting%20Vulnerabilities.pdf
CVE: CVE-2025-57702
Published: 2025-08-18
Description: DIAEnergie - Reflected Cross-site Scripting
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://filecenter.deltaww.com/news/download/doc/Delta-PCSA-2025-00012_DIAEnergie%20Cross-Site%20Scripting%20Vulnerabilities.pdf
CVE: CVE-2025-57703
Published: 2025-08-18
Description: DIAEnergie - Reflected Cross-site Scripting
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://filecenter.deltaww.com/news/download/doc/Delta-PCSA-2025-00012_DIAEnergie%20Cross-Site%20Scripting%20Vulnerabilities.pdf
CVE: CVE-2025-6625
Published: 2025-08-18
Description: CWE-20: Improper Input Validation vulnerability exists that could cause a Denial Of Service when specific
crafted FTP command is sent to the device.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2025-224-05&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2025-224-05.pdf
CVE: CVE-2025-5296
Published: 2025-08-18
Description: CWE-59: Improper Link Resolution Before File Access ('Link Following') vulnerability exists that could cause 
arbitrary data to be written to protected locations, potentially leading to escalation of privilege, arbitrary file 
corruption, exposure of application and system information or persistent denial of service when a low-privileged 
attacker tampers with the installation folder.
CVSS Score: 7.3 (HIGH)
CWE: CWE-59
References: https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2025-224-03&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2025-224-03.pdf
CVE: CVE-2025-41242
Published: 2025-08-18
Description: Spring Framework MVC applications can be vulnerable to a “Path Traversal Vulnerability” when deployed on a non-compliant Servlet container.

An application can be vulnerable when all the following are true:

  *  the application is deployed as a WAR or with an embedded Servlet container
  *  the Servlet container  does not reject suspicious sequences https://jakarta.ee/specifications/servlet/6.1/jakarta-servlet-spec-6.1.html#uri-path-canonicalization 
  *  the application  serves static resources https://docs.spring.io/spring-framework/reference/web/webmvc/mvc-config/static-resources.html#page-title  with Spring resource handling


We have verified that applications deployed on Apache Tomcat or Eclipse Jetty are not vulnerable, as long as default security features are not disabled in the configuration. Because we cannot check exploits against all Servlet containers and configuration variants, we strongly recommend upgrading your application.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-22
References: http://spring.io/security/cve-2025-41242
CVE: CVE-2025-47206
Published: 2025-08-18
Description: An out-of-bounds write vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to modify or corrupt memory.

We have already fixed the vulnerability in the following version:
File Station 5 5.5.6.4933 and later
CVSS Score: 8.1 (HIGH)
CWE: CWE-787
References: https://www.qnap.com/en/security-advisory/qsa-25-31
CVE: CVE-2025-43733
Published: 2025-08-18
Description: A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.7 allows a remote authenticated attacker to inject JavaScript code via the content page's name field. This malicious payload is then reflected and executed within the user's browser when viewing the "document View Usages" page.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/CVE-2025-43733
CVE: CVE-2024-49827
Published: 2025-08-18
Description: IBM Concert Software 1.0.0 through 1.1.0 is vulnerable to excessive data exposure, allowing attackers to access sensitive information without proper filtering.
CVSS Score: 3.7 (LOW)
CWE: CWE-213
References: https://www.ibm.com/support/pages/node/7242354
CVE: CVE-2025-1759
Published: 2025-08-18
Description: IBM Concert Software 1.0.0 through 1.1.0 could allow a remote attacker to obtain sensitive information from allocated memory due to improper clearing of heap memory.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-244, CWE-212
References: https://www.ibm.com/support/pages/node/7242354
CVE: CVE-2025-27909
Published: 2025-08-18
Description: IBM Concert Software 1.0.0 through 1.1.0 uses cross-origin resource sharing (CORS) which could allow an attacker to carry out privileged actions as the domain name is not being limited to only trusted domains.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-942, CWE-697
References: https://www.ibm.com/support/pages/node/7242354
CVE: CVE-2025-33090
Published: 2025-08-18
Description: IBM Concert Software 1.0.0 through 1.1.0 could allow a remote attacker to cause a denial of service using a specially crafted regular expression that would cause excessive resource consumption.
CVSS Score: 7.5 (HIGH)
CWE: CWE-1333
References: https://www.ibm.com/support/pages/node/7242354
CVE: CVE-2025-33100
Published: 2025-08-18
Description: IBM Concert Software 1.0.0 through 1.1.0 

contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-798
References: https://www.ibm.com/support/pages/node/7242354
CVE: CVE-2025-36120
Published: 2025-08-18
Description: IBM Storage Virtualize 8.4, 8.5, 8.6, and 8.7 could allow an authenticated user to escalate their privileges in an SSH session due to incorrect authorization checks to access resources.
CVSS Score: 8.8 (HIGH)
CWE: CWE-863
References: https://www.ibm.com/support/pages/node/7240796
CVE: CVE-2025-43732
Published: 2025-08-18
Description: Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.10, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.1 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.17 and 7.4 GA through update 92 is vulnerable to Insecure Direct Object Reference (IDOR) in the groupId parameter of the _com_liferay_roles_selector_web_portlet_RolesSelectorPortlet_groupId. When an organization administrator modifies this parameter id value, they can gain unauthorized access to user lists from other organizations.
CVSS Score: 2.7 (LOW)
CWE: CWE-639
References: https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/CVE-2025-43732
CVE: CVE-2025-4962
Published: 2025-08-18
Description: An Insecure Direct Object Reference (IDOR) vulnerability was identified in the `POST /v1/templates` endpoint of the Lunary API, affecting versions up to 0.8.8. This vulnerability allows authenticated users to create templates in another user's project by altering the `projectId` query parameter. The root cause of this issue is the absence of server-side validation to ensure that the authenticated user owns the specified `projectId`. The vulnerability has been addressed in version 1.9.23.
CVSS Score: 7.7 (HIGH)
CWE: CWE-284
References: https://github.com/lunary-ai/lunary/commit/e977d06f18a615963ffbe07e5bdff70218c29907; https://huntr.com/bounties/137a0aef-e243-49d4-832f-8e56056cba1a
CVE: CVE-2025-54117
Published: 2025-08-18
Description: NamelessMC is a free, easy to use & powerful website software for Minecraft servers. Cross-site scripting (XSS) vulnerability in NamelessMC before 2.2.3 allows remote authenticated attackers to inject arbitrary web script or HTML via the dashboard text editor component. This vulnerability is fixed in 2.2.4.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-79, CWE-80
References: https://github.com/NamelessMC/Nameless/commit/0e77706b2966dd9f2e30502126d6581ecc001f09; https://github.com/NamelessMC/Nameless/security/advisories/GHSA-gp3j-j84w-vqxx
CVE: CVE-2025-54118
Published: 2025-08-18
Description: NamelessMC is a free, easy to use & powerful website software for Minecraft servers. Sensitive information disclosure in NamelessMC before 2.2.4 allows unauthenticated remote attacker to gain sensitive information such as absolute path of the source code via list parameter. This vulnerability is fixed in 2.2.4.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://github.com/NamelessMC/Nameless/commit/3b94eb594dcbb1abc5524e41a0631df3ac95de8f; https://github.com/NamelessMC/Nameless/security/advisories/GHSA-cj37-8jqc-hv2w
CVE: CVE-2025-54421
Published: 2025-08-18
Description: NamelessMC is a free, easy to use & powerful website software for Minecraft servers. Cross-site scripting (XSS) vulnerability in NamelessMC before 2.2.4 allows remote authenticated attackers to inject arbitrary web script or HTML via the default_keywords crafted parameter. This vulnerability is fixed in 2.2.4.
CVSS Score: 7.2 (HIGH)
CWE: CWE-79, CWE-80
References: https://github.com/NamelessMC/Nameless/commit/56d35cff9ee944c061791ef478cabd2bed0223c4; https://github.com/NamelessMC/Nameless/security/advisories/GHSA-f5rm-w4mx-q7rx
CVE: CVE-2025-3639
Published: 2025-08-18
Description: Liferay Portal 7.3.0 through 7.4.3.132, and Liferay DXP 2025.Q1 through 2025.Q1.6, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.15, 7.4 GA through update 92 and 7.3 GA through update 36 allows unauthenticated users with valid credentials to bypass the login process by changing the POST method to GET, once the site has MFA enabled.
CWE: CWE-288
References: https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/CVE-2025-3639
CVE: CVE-2025-54234
Published: 2025-08-18
Description: ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerability that could lead to limited file system read. A high-privilege authenticated attacker can force the application to make arbitrary requests via injection of arbitrary URLs. Exploitation of this issue does not require user interaction.
CVSS Score: 2.7 (LOW)
CWE: CWE-918
References: https://helpx.adobe.com/security/products/coldfusion/apsb25-52.html
CVE: CVE-2025-55201
Published: 2025-08-18
Description: Copier library and CLI app for rendering project templates. Prior to 9.9.1, a safe template can currently read and write arbitrary files because Copier exposes a few pathlib.Path objects in the Jinja context which have unconstrained I/O methods. This effectively renders the security model w.r.t. filesystem access useless. This vulnerability is fixed in 9.9.1.
CWE: CWE-22
References: https://github.com/copier-org/copier/commit/3feea3b3ff3c20d80cbb16a2f3b9567ffc5606d1; https://github.com/copier-org/copier/security/advisories/GHSA-3xw7-v6cj-5q8h
CVE: CVE-2025-55205
Published: 2025-08-18
Description: Capsule is a multi-tenancy and policy-based framework for Kubernetes. A namespace label injection vulnerability in Capsule v0.10.3 and earlier allows authenticated tenant users to inject arbitrary labels into system namespaces (kube-system, default, capsule-system), bypassing multi-tenant isolation and potentially accessing cross-tenant resources through TenantResource selectors. This vulnerability enables privilege escalation and violates the fundamental security boundaries that Capsule is designed to enforce. This vulnerability is fixed in 0.10.4.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-863
References: https://github.com/projectcapsule/capsule/commit/e1f47feade6e1695b[PII_REDACTED]d07c3b3994f6e; https://github.com/projectcapsule/capsule/security/advisories/GHSA-fcpm-6mxq-m5vv
CVE: CVE-2025-55214
Published: 2025-08-18
Description: Copier library and CLI app for rendering project templates. From 7.1.0 to before 9.9.1, Copier suggests that it's safe to generate a project from a safe template, i.e. one that doesn't use unsafe features like custom Jinja extensions which would require passing the --UNSAFE,--trust flag. As it turns out, a safe template can currently write files outside the destination path where a project shall be generated or updated. This is possible when rendering a generated directory structure whose rendered path is either a relative parent path or an absolute path. Constructing such paths is possible using Copier's builtin pathjoin Jinja filter and its builtin _copier_conf.sep variable, which is the platform-native path separator. This way, a malicious template author can create a template that overwrites arbitrary files (according to the user's write permissions), e.g., to cause havoc. This vulnerability is fixed in 9.9.1.
CWE: CWE-22
References: https://github.com/copier-org/copier/commit/fdbc0167cc22780b497e4db176feaf6f024757d6; https://github.com/copier-org/copier/security/advisories/GHSA-p7q8-grrj-3m8w
CVE: CVE-2025-55282
Published: 2025-08-18
Description: aiven-db-migrate is an Aiven database migration tool. Prior to 1.0.7, there is a privilege escalation vulnerability that allows a user to elevate to superuser inside PostgreSQL databases during a migration from an untrusted source server. By exploiting a lack of search_path restriction, an attacker can override pg_catalog and execute untrusted operators as a superuser. This vulnerability is fixed in 1.0.7.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-22
References: https://github.com/aiven/aiven-db-migrate/commit/39517dc55720055d93262033b142a365f5bf92c5; https://github.com/aiven/aiven-db-migrate/security/advisories/GHSA-hmvf-93r4-36f9
CVE: CVE-2025-55283
Published: 2025-08-18
Description: aiven-db-migrate is an Aiven database migration tool. Prior to 1.0.7, there is a privilege escalation vulnerability that allows elevation to superuser inside PostgreSQL databases during a migration from an untrusted source server. The vulnerability stems from psql executing commands embedded in a dump from the source server. This vulnerability is fixed in 1.0.7.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-77
References: https://github.com/aiven/aiven-db-migrate/commit/36f6c7f7d06216975f625da0a1cb514253c4b3df; https://github.com/aiven/aiven-db-migrate/security/advisories/GHSA-wqhc-grmj-fjvg
CVE: CVE-2025-55287
Published: 2025-08-18
Description: Genealogy is a family tree PHP application. Prior to 4.4.0, Authenticated Stored Cross-Site Scripting (XSS) vulnerability was identified in the Genealogy application. Authenticated attackers could run arbitrary JavaScript in another user’s session, leading to session hijacking, data theft, and UI manipulation. This vulnerability is fixed in 4.4.0.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/MGeurts/genealogy/commit/1683b3cbea5e52c99291fa231b7bc8c33f33c33f; https://github.com/MGeurts/genealogy/security/advisories/GHSA-j457-9m86-6q5r
CVE: CVE-2025-55288
Published: 2025-08-18
Description: Genealogy is a family tree PHP application. Prior to 4.4.0, Authenticated Reflected Cross-Site Scripting (XSS) vulnerability was identified in the Genealogy application. Authenticated attackers could run arbitrary JavaScript in another user’s session, leading to session hijacking, data theft, and UI manipulation. This vulnerability is fixed in 4.4.0.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-79
References: https://github.com/MGeurts/genealogy/commit/1683b3cbea5e52c99291fa231b7bc8c33f33c33f; https://github.com/MGeurts/genealogy/security/advisories/GHSA-3h8x-g9xj-rhwg
CVE: CVE-2025-55291
Published: 2025-08-18
Description: Shaarli is a minimalist bookmark manager and link sharing service. Prior to 0.15.0, the input string in the cloud tag page is not properly sanitized. This allows the </title> tag to be prematurely closed, leading to a reflected Cross-Site Scripting (XSS) vulnerability. This vulnerability is fixed in 0.15.0.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79, CWE-80, CWE-87
References: https://github.com/shaarli/Shaarli/commit/66faa61335a6e72184be64092ff1242ffa4fe5b6; https://github.com/shaarli/Shaarli/security/advisories/GHSA-7w7w-pw4j-265h
CVE: CVE-2025-55293
Published: 2025-08-18
Description: Meshtastic is an open source mesh networking solution. Prior to v2.6.3, an attacker can send NodeInfo with a empty publicKey first, then overwrite it with a new key. First sending a empty key bypasses 'if (p.public_key.size > 0) {', clearing the existing publicKey (and resetting the size to 0) for a known node. Then a new key bypasses 'if (info->user.public_key.size > 0) {', and this malicious key is stored in NodeDB. This vulnerability is fixed in 2.6.3.
CVSS Score: 9.4 (CRITICAL)
CWE: CWE-287
References: https://github.com/meshtastic/firmware/commit/cf7f0f9d0895602df3453a4f5cfea843f4e09744; https://github.com/meshtastic/firmware/pull/6372; https://github.com/meshtastic/firmware/security/advisories/GHSA-95pq-gj5v-4fg2
CVE: CVE-2025-55296
Published: 2025-08-18
Description: librenms is a community-based GPL-licensed network monitoring system. A stored Cross-Site Scripting (XSS) vulnerability exists in LibreNMS (<= 25.6.0) in the Alert Template creation feature. This allows a user with the admin role to inject malicious JavaScript, which will be executed when the template is rendered, potentially compromising other admin accounts. This vulnerability is fixed in 25.8.0.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-79
References: https://github.com/librenms/librenms/commit/8ade3d827d317f5ac4b336617aafff865f825958; https://github.com/librenms/librenms/security/advisories/GHSA-vxq6-8cwm-wj99
CVE: CVE-2025-55299
Published: 2025-08-18
Description: VaulTLS is a modern solution for managing mTLS (mutual TLS) certificates. Prior to 0.9.1, user accounts created through the User web UI have an empty but not NULL password set, attackers can use this to login with an empty password. This is combined with that fact, that previously disabling the password based login only effected the frontend, but still allowed login via the API. This vulnerability is fixed in 0.9.1.
CVSS Score: 9.4 (CRITICAL)
CWE: CWE-521
References: https://github.com/7ritn/VaulTLS/commit/6ac0a43a768f1753f6889ba43f914e773a4b45c0; https://github.com/7ritn/VaulTLS/security/advisories/GHSA-pjfr-pj3h-cw8m
CVE: CVE-2025-55300
Published: 2025-08-18
Description: Komari is a lightweight, self-hosted server monitoring tool designed to provide a simple and efficient solution for monitoring server performance. Prior to 1.0.4-fix1, WebSocket upgrader has disabled origin checking, enabling Cross-Site WebSocket Hijacking (CSWSH) attacks against authenticated users. Any third party website can send requests to the terminal websocket endpoint with browser's cookies, resulting in remote code execution. This vulnerability is fixed in 1.0.4-fix1.
CWE: CWE-79
References: https://github.com/komari-monitor/komari/commit/d31d12e59febce100ab0285b93338f09aa5d6cb1; https://github.com/komari-monitor/komari/security/advisories/GHSA-q355-h244-969h