CVE-2025-0971

Summary

CVE-2025-0971 is a newly disclosed vulnerability affecting Zenvia Movidesk up to version 25.01.22. This issue, rated as problematic, lies within the /Account/EditProfile feature of the Profile Editing component. The vulnerability enables an attacker to execute cross-site scripting by manipulating the argument 'username'. The exploit can be launched remotely, posing a significant threat. Public disclosure of the exploit increases the risk, making it crucial for users to upgrade to version 25.01.22.245a473c54 as soon as possible to mitigate the risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.