CVE-2025-0790

Summary

CVE-2025-0790 is a newly disclosed vulnerability affecting ESAFENET CDG V5. The issue lies within the /doneDetail.jsp file and stems from a cross-site scripting (XSS) vulnerability. The manipulation of the curpage argument triggers this vulnerability, allowing remote attackers to inject malicious code. Despite early notification, the vendor has yet to issue a response or patch. Consequently, the exploit is publicly available, posing a significant risk to unpatched systems.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.