Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Количество 3

Количество 3

nvd логотип

CVE-2025-65516

9 месяцев назад

A stored cross-site scripting (XSS) vulnerability was discovered in Seafile Community Edition prior to version 13.0.12. When Seafile is configured with the Golang file server, an attacker can upload a crafted SVG file containing malicious JavaScript and share it using a public link. Opening the link triggers script execution in the victim's browser. This issue has been fixed in Seafile Community Edition 13.0.12.

CVSS3: 6.1
EPSS: Низкий
debian логотип

CVE-2025-65516

9 месяцев назад

A stored cross-site scripting (XSS) vulnerability was discovered in Se ...

CVSS3: 6.1
EPSS: Низкий
github логотип

GHSA-86jv-vvjm-w37g

9 месяцев назад

A stored cross-site scripting (XSS) vulnerability was discovered in Seafile Community Edition prior to version 13.0.12. When Seafile is configured with the Golang file server, an attacker can upload a crafted SVG file containing malicious JavaScript and share it using a public link. Opening the link triggers script execution in the victim's browser. This issue has been fixed in Seafile Community Edition 13.0.12.

CVSS3: 6.1
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2025-65516

A stored cross-site scripting (XSS) vulnerability was discovered in Seafile Community Edition prior to version 13.0.12. When Seafile is configured with the Golang file server, an attacker can upload a crafted SVG file containing malicious JavaScript and share it using a public link. Opening the link triggers script execution in the victim's browser. This issue has been fixed in Seafile Community Edition 13.0.12.

CVSS3: 6.1
0%
Низкий
9 месяцев назад
debian логотип
CVE-2025-65516

A stored cross-site scripting (XSS) vulnerability was discovered in Se ...

CVSS3: 6.1
0%
Низкий
9 месяцев назад
github логотип
GHSA-86jv-vvjm-w37g

A stored cross-site scripting (XSS) vulnerability was discovered in Seafile Community Edition prior to version 13.0.12. When Seafile is configured with the Golang file server, an attacker can upload a crafted SVG file containing malicious JavaScript and share it using a public link. Opening the link triggers script execution in the victim's browser. This issue has been fixed in Seafile Community Edition 13.0.12.

CVSS3: 6.1
0%
Низкий
9 месяцев назад

Уязвимостей на страницу