4 matches found
CVE-2025-27102
Agate is central authentication server software for OBiBa epidemiology applications. Prior to version 3.3.0, when registering for an Agate account, arbitrary HTML code can be injected into a user's first and last name. This HTML is then rendered in the email sent to administrative users. The Agat...
CVE-2025-27102
Agate is central authentication server software for OBiBa epidemiology applications. Prior to version 3.3.0, when registering for an Agate account, arbitrary HTML code can be injected into a user's first and last name. This HTML is then rendered in the email sent to administrative users. The Agat...
CVE-2025-27102
creationtimestamp| type| source ---|---|--- 2025-03-17 13:46:59+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7767 2025-03-17 17:45:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lklphthwha2x...
CVE-2025-27102 Agate vulnerable to HTML injection in user signup - Administrator phishing risk
Agate is central authentication server software for OBiBa epidemiology applications. Prior to version 3.3.0, when registering for an Agate account, arbitrary HTML code can be injected into a user's first and last name. This HTML is then rendered in the email sent to administrative users. The Agat...