CVE-2020-25131

🗓️ 25 Sep 2020 13:56:00Reported by mitreType

cve🔗 web.nvd.nist.gov👁 50 Views🌐 WEB

An XSS vulnerability in Observium 20.8.10631 allows injection of malicious JavaScript code via the role_name or role_descr parameter

Reporter	Title	Published	Views	Family All 6
CNVD	Observium cross-site scripting vulnerability (CNVD-2020-54787)	27 Sep 202000:00	–	cnvd
Cvelist	CVE-2020-25131	25 Sep 202013:56	–	cvelist
EUVD	EUVD-2020-17822	7 Oct 202500:30	–	euvd
NVD	CVE-2020-25131	25 Sep 202014:15	–	nvd
OSV	CVE-2020-25131	25 Sep 202014:15	–	osv
Prion	Cross site scripting	25 Sep 202014:15	–	prion

NVD

Node

observium observiumMatch20.8.10631community

observium observiumMatch20.8.10631enterprise

observium observiumMatch20.8.10631professional

Source	Link
gist	www.gist.github.com/mariuszpoplawski/9eab675bdafb7974d0114578f1ec1845

Parameter	Position	Path	Description	CWE
role_name	request body	/roles/	Cross-Site Scripting via stored payload in role_name or role_descr parameter to the roles/ URI.	CWE-79
role_descr	request body	/roles/	Cross-Site Scripting via stored payload in role_name or role_descr parameter to the roles/ URI.	CWE-79

17 Jun 2026 03:06Current

5.9Medium risk

Vulners AI Score5.9

CVSS 24.3

CVSS 3.16.1

EPSS0.00836