CVE-2025-27590

The CVE concerns oxidized-web (Oxidized Web) before version 0.15.0, where the RANCID migration page can be accessed without authentication and allows an attacker to gain control over the Linux user account running oxidized-web. Public details in connected documents describe the issue as a path tr...

CVE-2019-25088

The CVE-2019-25088 issue affects ytti Oxidized Web, specifically the file lib/oxidized/web/views/conf_search.haml. The root cause is manipulation of the to_research argument, which leads to cross-site scripting. The vulnerability can be triggered remotely, exposing users to XSS via crafted input....