CVE-2025-3790 baseweb JSite Apache Druid Monitoring Console index.html access control

A vulnerability classified as critical has been found in baseweb JSite 1.0. This affects an unknown part of the file /druid/index.html of the component Apache Druid Monitoring Console. The manipulation leads to improper access controls. It is possible to initiate the attack remotely. The exploit...

CVE-2025-3790

CVE-2025-3790 affects baseweb JSite 1.0, impacting the /druid/index.html file of the Apache Druid Monitoring Console. Root cause: improper access controls that permit a remote attack. Public exploit details exist. All connected sources corroborate a lack of published fix/version update in the pro...

CVE-2025-3789 baseweb JSite save cross site scripting

A vulnerability was found in baseweb JSite 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /a/sys/area/save. The manipulation of the argument Name leads to cross site scripting. The attack may be launched remotely. The exploit has been...

CVE-2025-3789

CVE-2025-3789 affects baseweb JSite 1.0. The vulnerability is in the file /a/sys/area/save where manipulation of the Name parameter enables cross-site scripting. Exploitation is possible remotely, and public disclosure is noted. Connected sources consistently identify the affected component and a...

CVE-2025-3789 baseweb JSite save cross site scripting

A vulnerability was found in baseweb JSite 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /a/sys/area/save. The manipulation of the argument Name leads to cross site scripting. The attack may be launched remotely. The exploit has been...

CVE-2025-3788

A vulnerability was found in baseweb JSite 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /a/sys/user/save. The manipulation of the argument Name leads to cross site scripting. The attack can be launched remotely. The exploit has...

CVE-2025-3788

A vulnerability was found in baseweb JSite 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /a/sys/user/save. The manipulation of the argument Name leads to cross site scripting. The attack can be launched remotely. The exploit has...

CVE-2025-3788 baseweb JSite save cross site scripting

A vulnerability was found in baseweb JSite 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /a/sys/user/save. The manipulation of the argument Name leads to cross site scripting. The attack can be launched remotely. The exploit has...

CVE-2025-3788

CVE-2025-3788 affects baseweb JSite 1.0. The vulnerability is in the file /a/sys/user/save where manipulating the Name parameter leads to cross-site scripting; the attack can be launched remotely and exploit details have been publicly disclosed. Multiple connected sources corroborate the presence...

CVE-2025-3788 baseweb JSite save cross site scripting

A vulnerability was found in baseweb JSite 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /a/sys/user/save. The manipulation of the argument Name leads to cross site scripting. The attack can be launched remotely. The exploit has...

PT-2025-17262 · Unknown · Baseweb Jsite

Name of the Vulnerable Software and Affected Versions: baseweb JSite version 1.0 Description: A problematic issue was found in the software, affecting some unknown functionality of the file /a/sys/area/save. The manipulation of the Name argument leads to cross-site scripting. The attack may be...

PT-2025-17261 · Unknown · Baseweb Jsite

Name of the Vulnerable Software and Affected Versions: baseweb JSite version 1.0 Description: A vulnerability was found in the file /a/sys/user/save, where the manipulation of the Name argument leads to cross-site scripting. The attack can be launched remotely. Recommendations: For baseweb JSite...

CVE-2025-3788: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in baseweb JSite 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /a/sys/user/save. The manipulation of the argument Name leads to cross site scripting. The attack can be launched remotely. The exploit has...

PT-2025-17263 · Unknown +1 · Baseweb Jsite +1

Name of the Vulnerable Software and Affected Versions: baseweb JSite version 1.0 Description: A critical issue has been discovered, affecting the Apache Druid Monitoring Console, specifically the /druid/index.html file. This leads to improper access controls, allowing for remote attacks. The...

CVE-2025-3789: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in baseweb JSite 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /a/sys/area/save. The manipulation of the argument Name leads to cross site scripting. The attack may be launched remotely. The exploit has been...