CVE-2025-25264

6.5MEDIUM

An unauthenticated remote attacker can trick an admin to visit a website containing malicious java script code. The current overly permissive CORS policy allows the attacker to obtain any files from t

Опубликовано: 6/16/2025Обновлено: 11/21/2025
Посмотреть на NVDПосмотреть на MITRE

Описание

An unauthenticated remote attacker can trick an admin to visit a website containing malicious java script code. The current overly permissive CORS policy allows the attacker to obtain any files from the file system.

ИИ-АнализНа базе ИИ

Ссылки