Medium severity6.1NVD Advisory· Published Sep 19, 2025· Updated Jun 17, 2026

CVE-2025-30755

Description

OpenGrok 1.14.1 has a reflected Cross-Site Scripting (XSS) issue when producing the cross reference page. This happens through improper handling of the revision parameter. The application reflects unsanitized user input into the HTML output.

Affected products

Oracle Corporation/Opengrok2 versions
cpe:2.3:a:oracle:opengrok:1.14.1:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:oracle:opengrok:1.14.1:*:*:*:*:*:*:*
- (no CPE)range: 1.14.1
OpenGrok/OpenGrokllm-fuzzy
Range: =1.14.1

Patches

Vulnerability mechanics

References

www.oracle.com/security-alerts/all-oracle-cves-outside-other-oracle-public-documents.htmlnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000