CVE-2025-5990
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Crafty Controller
Résumé
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Crafty Controller
Description d'origine
La description telle que publiée par la source (souvent en anglais).
An input neutralization vulnerability in the Server Name form and API Key form components of Crafty Controller allows a remote, authenticated attacker to perform stored XSS via malicious form input.
Références
- advisory github.com
- advisory nvd.nist.gov
- report gitlab.com