AIxBlock Cross-Site Scripting Vulnerability

AIxBlock is an AI automation platform. A cross-site scripting vulnerability exists in AIxBlock version 04f305, which stems from a modeldesc field that does not validate input and can be exploited by an attacker to cause a stored cross-site scripting attack...

CVE-2025-60950

An arbitrary file upload vulnerability in the Data Preparation function of AIxBlock commit f60975 allows attackers to execute arbitrary code via a crafted SVG file...

EUVD-2025-37048

An arbitrary file upload vulnerability in the Data Preparation function of AIxBlock commit f60975 allows attackers to execute arbitrary code via a crafted SVG file...

EUVD-2025-37047

A stored cross-site scripting XSS vulnerability in AIxBlock commit 04f305 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the modeldesc field...

CVE-2025-63885

A stored cross-site scripting XSS vulnerability in AIxBlock commit 04f305 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the modeldesc field...

CVE-2025-60950

An arbitrary file upload vulnerability in the Data Preparation function of AIxBlock commit f60975 allows attackers to execute arbitrary code via a crafted SVG file...

CVE-2025-60950

The AIxBlock open-source AI automation platform contains an arbitrary file upload vulnerability within its Data Preparation function, specifically affecting commit f60975 . An attacker can exploit this by uploading a crafted SVG file , which can lead to the execution of arbitrary code . The vulne...

CVE-2025-60950

An arbitrary file upload vulnerability in the Data Preparation function of AIxBlock commit f60975 allows attackers to execute arbitrary code via a crafted SVG file...

PT-2025-44434

Name of the Vulnerable Software and Affected Versions AIxBlock commit f60975 Description An arbitrary file upload issue exists in the Data Preparation function. Successful exploitation of this issue allows attackers to execute arbitrary code by uploading a crafted SVG file. Recommendations At the...

AIxBlock 安全漏洞

AIxBlock is an AI automation platform open-sourced by AIxBlock. AIxBlock has a security vulnerability that stems from an arbitrary file upload vulnerability in the Data Preparation feature that could lead to the execution of arbitrary code...

CVE-2025-63885

A stored cross-site scripting XSS vulnerability in AIxBlock commit 04f305 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the modeldesc field...

CVE-2025-63885

The AIxBlock AI automation platform is affected by a stored cross-site scripting (XSS) vulnerability in commit 04f305 . The root cause is a lack of input validation in the model_desc field, which allows an attacker to inject a crafted payload to execute arbitrary web scripts or HTML. No informati...

CVE-2025-63885

A stored cross-site scripting XSS vulnerability in AIxBlock commit 04f305 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the modeldesc field...

CVE-2025-63885: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in AIxBlock commit 04f305 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the modeldesc field...

CVE-2025-60950: Improper Neutralization of Input During Web Page Generation

An arbitrary file upload vulnerability in the Data Preparation function of AIxBlock commit f60975 allows attackers to execute arbitrary code via a crafted SVG file...