CVE-2025-1337

Summary

CVE-2025-1337 is a newly identified vulnerability in Eastnets PaymentSafe 2.5.26.0. This issue resides within the BIC Search component and has been classified as problematic. Attackers can exploit this flaw to launch cross-site scripting attacks, enabling them to inject malicious code into a victim's web browser. Remotely initiating these attacks is feasible, making it a significant security concern. Despite early disclosure, the vendor has yet to engage in any form of response.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.