CVE-2025-25264 in CC100 0751-9x01info

Zusammenfassung

von MITRE • 16.06.2025

An unauthenticated remote attacker can trick an admin to visit a website containing malicious java script code. The current overly permissive CORS policy allows the attacker to obtain any files from the file system.

Be aware that VulDB is the high quality source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Zuständig

CERTVDE

Reservieren

06.02.2025

Veröffentlichung

16.06.2025

Moderieren

akzeptiert

Eintrag

VDB-312647

CPE

bereit

EPSS

0.00386

KEV

nein

Aktivitäten

very low

Quellen

MITREhttps://www.cve.org/CVERecord?id=CVE-2025-25264
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2025-25264
CVE Detailshttps://www.cvedetails.com/cve/CVE-2025-25264/

◂ ZurückÜbersichtWeiter ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!