CVE-2025-5990
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Crafty Controller
概要
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Crafty Controller
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
An input neutralization vulnerability in the Server Name form and API Key form components of Crafty Controller allows a remote, authenticated attacker to perform stored XSS via malicious form input.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- report gitlab.com