CVE-2025-35996 KUNBUS Revolution Pi Improper Neutralization of Server-Side Includes (SSI) Within a Web Page

KUNBUS PiCtory version 2.11.1 and earlier are vulnerable when an authenticated remote attacker crafts a special filename that can be stored by API endpoints. That filename is later transmitted to the client in order to show a list of configuration files. Due to a missing escape or sanitization, t...

CVE-2025-35996

CVE-2025-35996 concerns KUNBUS Revolution Pi PiCtory: versions 2.11.1 and earlier are vulnerable to a cross-site scripting (XSS) flaw caused by unescaped filenames stored by API endpoints. An authenticated remote attacker can craft a filename that is later rendered in the client’s HTML (via expor...

CVE-2025-35996 KUNBUS Revolution Pi Improper Neutralization of Server-Side Includes (SSI) Within a Web Page

KUNBUS PiCtory version 2.11.1 and earlier are vulnerable when an authenticated remote attacker crafts a special filename that can be stored by API endpoints. That filename is later transmitted to the client in order to show a list of configuration files. Due to a missing escape or sanitization, t...

CVE-2025-35996

creationtimestamp| type| source ---|---|--- 2025-05-01 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-121-01 2025-05-01 20:35:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lo55xlnnhr2t 2025-05-01 22:01:57+00:00| published-proof-of-concept|...