Lucene search
K

6 matches found

OSV
OSV
added 2025/04/27 4:15 p.m.1 views

CVE-2025-46657

Karaz Karazal through 2025-04-14 allows reflected XSS via the lang parameter to the default URI...

6.1CVSS5.8AI score0.00037EPSS
Exploits2References1
CVE
CVE
added 2025/04/27 12:0 a.m.63 views

CVE-2025-46657

Karaz Karazal (through 2025-04-14) is affected by a reflected XSS vulnerability in the lang parameter to the default URI. The public documentation identifies the vulnerable component as Karaz Karazal and the issue arises from insufficient input neutralization during page generation. Severity vari...

7.2CVSS5.9AI score0.00037EPSS
Exploits2References1Affected Software1
Cvelist
Cvelist
added 2025/04/27 12:0 a.m.12 views

CVE-2025-46657

Karaz Karazal through 2025-04-14 allows reflected XSS via the lang parameter to the default URI...

7.2CVSS0.00037EPSS
Exploits2References1
Positive Technologies
Positive Technologies
added 2025/04/27 12:0 a.m.3 views

PT-2025-18004 · Unknown · Karaz Karazal

Name of the Vulnerable Software and Affected Versions: Karaz Karazal through 2025-04-14 Description: The issue allows reflected XSS via the lang parameter to the default URI. This can lead to improper neutralization of input during web page generation, also known as cross-site scripting...

7.2CVSS5.3AI score0.00037EPSS
Exploits2References11
CNNVD
CNNVD
added 2025/04/27 12:0 a.m.1 views

Karaz Karazal 安全漏洞

Karaz Karazal is an innovative digital platform from Karaz that provides intelligent business solutions and services. A security vulnerability exists in Karaz Karazal version 2025-04-14 and earlier, which stems from a parameter lang leading to reflective cross-site scripting...

7.2CVSS6.2AI score0.00037EPSS
Exploits2References2
Vulnrichment
Vulnrichment
added 2025/04/27 12:0 a.m.8 views

CVE-2025-46657

Karaz Karazal through 2025-04-14 allows reflected XSS via the lang parameter to the default URI...

7.2CVSS6.7AI score0.00037EPSS
Exploits2References1
Rows per page
Query Builder