Aller au contenu
en Se connecter
5.8 Moyenne

CVE-2025-3718 A client-side path traversal vulnerability was discovered in the web management interface front-end due to missing…

Description

A client-side path traversal vulnerability was discovered in the web management interface front-end due to missing validation of an input parameter. An authenticated user with limited privileges can craft a malicious URL which, if visited by an authenticated victim, leads to a Cross-Site Scripting (XSS) attack.

Produits et versions touchés

Produit Versions touchées Corrigé en
Guardian 25.2 premières → < 25.2.0 25.2.0
CMC 25.2 premières → < 25.2.0 25.2.0

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Guardian

Les 53 CVE de Guardian →
CVE-2026-33924 Two OS command injection vulnerabilities were discovered in the update installation functionality due to insufficient… 7.5 Élevée CVE-2026-33923 A signature verification vulnerability was discovered in the update installation functionality due to inconsistent… 7.5 Élevée CVE-2026-33920 A cross-site request forgery vulnerability was discovered in the login functionality (both standard and SAML) due to… 5.1 Moyenne CVE-2026-33391 An access control vulnerability was discovered in the Smart Polling configuration functionality due to insufficient… 5.3 Moyenne
Suivre cette CVE