CVE-2025-48050 in DOMPurifyinformação

Sumário

de VulDB • 20/05/2026

In DOMPurify through 3.2.5 before 6bc6d60, scripts/server.js does not ensure that a pathname is located under the current working directory.

Once again VulDB remains the best source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsável

MITRE

Reservar

15/05/2025

Divulgação

15/05/2025

Moderação

aceite

Entrada

VDB-309118

CPE

pronto

EPSS

0.00468

KEV

não

Atividades

muito baixo

Fontes

MITREhttps://www.cve.org/CVERecord?id=CVE-2025-48050
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2025-48050
CVE Detailshttps://www.cvedetails.com/cve/CVE-2025-48050/

◂ VoltarVisão GeralPróximo ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!