Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2025/12/08 12:15 p.m.29 views

CVE-2025-42620 CSRF vulnerability in CIRCL Vulnerability-Lookup

In affected versions, vulnerability-lookup handled user-controlled content in comments and bundles in an unsafe way, which could lead to stored Cross-Site Scripting XSS. On the backend, the relatedvulnerabilities field of bundles accepted arbitrary strings without format validation or proper...

8.3CVSS0.00256EPSS
SaveExploits0References1
Rows per page
Query Builder