Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-15173

Опубликовано: 29 дек. 2025
Источник: nvd
CVSS3: 3.5
CVSS3: 5.4
CVSS2: 4
EPSS Низкий

Описание

A weakness has been identified in SohuTV CacheCloud up to 3.2.0. Affected is the function advancedAnalysis of the file src/main/java/com/sohu/cache/web/controller/InstanceController.java. This manipulation causes cross site scripting. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be exploited. The project was informed of the problem early through an issue report but has not responded yet.

Ссылки

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:sohu:cachecloud:*:*:*:*:*:*:*:*
Версия до 3.2 (включая)

EPSS

Процентиль: 6%
0.00025
Низкий

3.5 Low

CVSS3

5.4 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 3.5
github
около 1 месяца назад

A weakness has been identified in SohuTV CacheCloud up to 3.2.0. Affected is the function advancedAnalysis of the file src/main/java/com/sohu/cache/web/controller/InstanceController.java. This manipulation causes cross site scripting. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be exploited. The project was informed of the problem early through an issue report but has not responded yet.

EPSS

Процентиль: 6%
0.00025
Низкий

3.5 Low

CVSS3

5.4 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-79