Medium severity5.4NVD Advisory· Published Jun 10, 2025· Updated Jun 17, 2026
CVE-2025-3117
CVE-2025-3117
Description
CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists impacting configuration file paths that could cause an unvalidated data injected by authenticated malicious user leading to modify or read data in a victim’s browser.
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.