CVE-2025-22332
CVSS 3.1 Score 7.1 of 10 (high)
Details
Published Jan 31, 2025
CWE ID 79
Summary
CVE-2025-22332 is a Cross-site Scripting (XSS) vulnerability affecting the CloudFlare(R) Cache Purge feature from an unknown version up to 1.2. The issue arises due to improper neutralization of user input during web page generation, allowing attackers to inject malicious scripts into CloudFlare's cache purge interface. Successful exploitation could lead to unauthorized access, data theft, or site defacement. Users are advised to update their CloudFlare Cache Purge to the latest version to address this vulnerability.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.