CVE-2025-46657
CVSS 3.1 Score 6.1 of 10 (medium)
Details
Published Apr 27, 2025
Updated: May 12, 2025
CWE ID 79
Summary
CVE-2025-46657 is a newly discovered vulnerability affecting Karaz Karazal up to version 2025-04-14. This issue permits Reflected Cross-Site Scripting (XSS) attacks through the lang parameter in the default URI. An attacker can inject malicious scripts into a webpage, leading to potentially unauthorized access to user data or session hijacking. Users are advised to update to the latest version of Karaz Karazal to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Karazal