Логотип exploitDog
bind:CVE-2025-65516
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2025-65516

Количество 3

Количество 3

nvd логотип

CVE-2025-65516

2 месяца назад

A stored cross-site scripting (XSS) vulnerability was discovered in Seafile Community Edition prior to version 13.0.12. When Seafile is configured with the Golang file server, an attacker can upload a crafted SVG file containing malicious JavaScript and share it using a public link. Opening the link triggers script execution in the victim's browser. This issue has been fixed in Seafile Community Edition 13.0.12.

CVSS3: 6.1
EPSS: Низкий
debian логотип

CVE-2025-65516

2 месяца назад

A stored cross-site scripting (XSS) vulnerability was discovered in Se ...

CVSS3: 6.1
EPSS: Низкий
github логотип

GHSA-86jv-vvjm-w37g

2 месяца назад

A stored cross-site scripting (XSS) vulnerability was discovered in Seafile Community Edition prior to version 13.0.12. When Seafile is configured with the Golang file server, an attacker can upload a crafted SVG file containing malicious JavaScript and share it using a public link. Opening the link triggers script execution in the victim's browser. This issue has been fixed in Seafile Community Edition 13.0.12.

CVSS3: 6.1
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2025-65516

A stored cross-site scripting (XSS) vulnerability was discovered in Seafile Community Edition prior to version 13.0.12. When Seafile is configured with the Golang file server, an attacker can upload a crafted SVG file containing malicious JavaScript and share it using a public link. Opening the link triggers script execution in the victim's browser. This issue has been fixed in Seafile Community Edition 13.0.12.

CVSS3: 6.1
0%
Низкий
2 месяца назад
debian логотип
CVE-2025-65516

A stored cross-site scripting (XSS) vulnerability was discovered in Se ...

CVSS3: 6.1
0%
Низкий
2 месяца назад
github логотип
GHSA-86jv-vvjm-w37g

A stored cross-site scripting (XSS) vulnerability was discovered in Seafile Community Edition prior to version 13.0.12. When Seafile is configured with the Golang file server, an attacker can upload a crafted SVG file containing malicious JavaScript and share it using a public link. Opening the link triggers script execution in the victim's browser. This issue has been fixed in Seafile Community Edition 13.0.12.

CVSS3: 6.1
0%
Низкий
2 месяца назад

Уязвимостей на страницу