CVE-2025-43952

Summary

CVE-2025-43952 is a newly identified cross-site scripting (XSS) vulnerability affecting Mettler Toledo FreeWeight.Net Web Reports Viewer version 8.4.0 (440). An attacker can exploit this reflected XSS flaw by injecting malicious scripts into the IW_SessionID_ parameter, posing a significant threat to users who visit compromised websites. Successful exploitation may result in unauthorized access to user data or session hijacking, potentially leading to sensitive information disclosure or account takeover. It is recommended that users upgrade to the latest version of the software to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.