CVE-2025-55291
Shaarli allows reflected XSS via searchtags parameter
Résumé
Shaarli allows reflected XSS via searchtags parameter
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Shaarli is a minimalist bookmark manager and link sharing service. Prior to 0.15.0, the input string in the cloud tag page is not properly sanitized. This allows the tag to be prematurely closed, leading to a reflected Cross-Site Scripting (XSS) vulnerability. This vulnerability is fixed in 0.15.0.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2025-55291 shaarli Corrigé dans: 0.12.1+dfsg-8+deb12u1
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com