CVE-2025-2130
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Published Mar 9, 2025
Updated: Mar 11, 2025
CWE ID 200
Summary
CVE-2025-2130 is a newly disclosed vulnerability affecting OpenXE versions up to 1.12. This issue lies within the Ticket Bearbeiten Page component and involves the manipulation of the argument Notizen. The consequence is cross-site scripting, allowing remote attackers to inject malicious scripts and potentially gain unauthorized access to user data. Despite early notification, the vendor has not responded to the disclosure, leaving users at risk until a patch is released.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.