CVE-2025-8511 : Chi tiết

CVE-2025-8511

5.1
/
Trung bình
0.19%V4
2025-08-03
13h32 +00:00
Cross-site ScriptingCode Injection
A03-Injection
Network
2026-10-10
15h56 +00:00
Thông báo cho một CVE
Luôn được thông báo về mọi thay đổi đối với một CVE cụ thể.
Quản lý thông báo

Mô tả CVE

Portabilis i-Diario Observações diario-de-observacoes cross site scripting

A vulnerability was found in Portabilis i-Diario 1.5.0. Impacted is an unknown function of the file /diario-de-observacoes/ of the component Observações. Performing a manipulation of the argument Descrição results in cross site scripting. It is possible to initiate the attack remotely. The exploit has been made public and could be used. The patch is named 821342cd8d952e8bd214cb16145da785a92f5681. It is suggested to install a patch to address this issue. The vendor confirms: "Audited values shown on that screen are now sanitized on output: only a minimal allowlist of basic formatting tags is kept and all attributes are stripped, so injected

Sản phẩm được đề cập

Cấu hình 0

Portabilis>>I-diario >> Version 1.5.0

Tài liệu tham khảo

https://vuldb.com/vuln/318610
Tags : vdb-entry, technical-description
https://vuldb.com/vuln/318610/cti
Tags : signature, permissions-required
https://vuldb.com/cve/CVE-2025-8511
Tags : third-party-advisory
https://vuldb.com/submit/618973
Tags : third-party-advisory