CVE-2025-23908

Summary

CVE-2025-23908 is a Cross-site Scripting (XSS) vulnerability affecting Pastebin from an unknown version through 1.5. The flaw, named Improper Neutralization of Input During Web Page Generation, enables attackers to inject malicious scripts into the Pastebin web interface. These scripts can be stored and executed on the victim's browser when they view the affected paste, potentially leading to unauthorized access to user information or session hijacking. Attackers can exploit this issue by crafting a specially crafted paste containing malicious scripts, which are then stored and executed whenever the paste is accessed. Users are advised to exercise caution when viewing and interacting with pastes on the affected Pastebin instances.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.