CVE-2025-30603

CVSS 3.1 Score 7.1 of 10 (high)

Details

Published Mar 24, 2025
Updated: Mar 27, 2025
CWE ID 352

Summary

CVE-2025-30603 is a Cross-Site Request Forgery (CSRF) vulnerability affecting DEJAN CopyLink, version n/a through 1.1. This issue enables an attacker to execute Stored XSS (Cross-Site Scripting) attacks on unsuspecting users. The CSRF flaw allows an attacker to manipulate a victim's browser into sending unintended requests, potentially leading to the execution of malicious scripts within the user's session. The Stored XSS component exacerbates the risk by allowing the attacker to inject and store malicious scripts within the application, which can then be executed whenever the vulnerable page is accessed by the victim.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share