CVE-2025-23696

Summary

CVE-2025-23696 is a Cross-site Scripting (XSS) vulnerability affecting NotFound Staging CDN. An attacker can exploit this Improper Neutralization of Input vulnerability during web page generation to inject malicious scripts into a CDN's response. Staging CDN versions from n/a to 1.0.0 are known to be impacted by this issue. Successful exploitation could lead to unintended execution of malicious code in users' browsers, potentially resulting in information disclosure or session hijacking. It is recommended that users update their CDN to the latest version and implement Content Security Policy (CSP) headers to mitigate the risk of XSS attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.