CVE-2025-3246

CVSS 3.1 Score 9.9 of 10 (high)

Details

Published Apr 17, 2025
Updated: Apr 21, 2025
CWE ID 602

Summary

CVE-2025-3246 is an input vulnerability affecting GitHub Enterprise Server, where malicious scripts could be injected using `$$..$$` math blocks in GitHub Markdown. This issue allowed for cross-site scripting attacks, requiring access to the targeted server and user interaction with the manipulated content. Version 3.16.1 was identified as being susceptible, while the vulnerability was addressed in version 3.16.2. The flaw was reported through GitHub's Bug Bounty program.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • RUGGEDCOM ROX RX1510
  • RUGGEDCOM ROX RX1511
  • RUGGEDCOM ROX RX1512
  • RUGGEDCOM ROX RX1524
  • RUGGEDCOM ROX RX1536

Advisories, Assessments, and Mitigations