CVE-2018-25090

Summary

CVE-2018-25090 is an XSS (Cross-Site Scripting) vulnerability that allows an unauthenticated attacker to inject malicious scripts into a web page. The vulnerability is caused by inadequate input validation during web page generation. Although user interaction is necessary for exploitation, successful attacks can result in the theft or manipulation of sensitive data, posing a risk to confidentiality and integrity. No impact on availability is reported in this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.