CVE-2025-52204

CVE-2025-52204 – XSS riflesso / Iniezione HTML nell'endpoint customer.pl di Znuny Riepilogo Una vulnerabilità di Cross-Site Scripting XSS riflesso e Iniezione HTML esiste in Znuny, consentendo agli attaccanti di iniettare JavaScript o HTML arbitrario tramite il parametro definito dalla...

CVE-2025-52204

A Cross-Site Scripting XSS vulnerability exists in Znuny::ITSM 6.5.x in the customer.pl endpoint via the OTRSCustomerInterface parameter...

CVE-2025-52204

A Cross-Site Scripting XSS vulnerability exists in Znuny::ITSM 6.5.x in the customer.pl endpoint via the OTRSCustomerInterface parameter...

Znuny 安全漏洞

Znuny is a ticket system of the Znuny company. Version 6.5.x of Znuny contains a security vulnerability. This vulnerability stems from improper handling of the OTRSCustomerInterface parameter in the customer.pl endpoint, which may lead to cross-site scripting attacks...