CVE-2025-8511 : Detail

CVE-2025-8511

5.1
/
Sedang
0.19%V4
2025-08-03
13h32 +00:00
Cross-site ScriptingCode Injection
A03-Injection
Network
2026-10-10
15h56 +00:00
CVE.org
NVD
Notifikasi untuk CVE tertentu
Tetap terinformasi tentang perubahan untuk CVE tertentu.
Kelola notifikasi

Deskripsi CVE

Portabilis i-Diario Observações diario-de-observacoes cross site scripting

A vulnerability was found in Portabilis i-Diario 1.5.0. Impacted is an unknown function of the file /diario-de-observacoes/ of the component Observações. Performing a manipulation of the argument Descrição results in cross site scripting. It is possible to initiate the attack remotely. The exploit has been made public and could be used. The patch is named 821342cd8d952e8bd214cb16145da785a92f5681. It is suggested to install a patch to address this issue. The vendor confirms: "Audited values shown on that screen are now sanitized on output: only a minimal allowlist of basic formatting tags is kept and all attributes are stripped, so injected

Produk yang Disebutkan

Konfigurasi 0

Portabilis>>I-diario >> Version 1.5.0

Referensi

https://vuldb.com/vuln/318610
Tags : vdb-entry, technical-description
https://vuldb.com/vuln/318610/cti
Tags : signature, permissions-required
https://vuldb.com/cve/CVE-2025-8511
Tags : third-party-advisory
https://vuldb.com/submit/618973
Tags : third-party-advisory
Informasi yang disajikan di CVE Find berasal dari beberapa sumber referensi yang dipilih dengan cermat. Data CVE disediakan oleh MITRE Corporation dan National Vulnerability Database (NVD). Katalog Known Exploited Vulnerabilities (KEV) bersumber dari Cybersecurity and Infrastructure Security Agency (CISA), sementara skor EPSS berasal dari FIRST.org. Selain itu, data mengenai kelemahan perangkat lunak (CWE) dan pola serangan umum (CAPEC) dikelola oleh MITRE Corporation, dan informasi tentang konfigurasi perangkat keras dan perangkat lunak (CPE) disediakan oleh NVD.