CVE-2025-27380: HTML Injection Leading to Script Execution in Altium Enterprise Server
HTML injection in Project Release in Altium Enterprise Server (AES) 7.0.3 on all platforms allows an authenticated attacker to execute arbitrary JavaScript in the victim’s browser via crafted HTML content.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-27380?
CVE-2025-27380 is classified as a high severity vulnerability due to its potential for remote code execution via HTML injection.
How do I fix CVE-2025-27380?
To fix CVE-2025-27380, update Altium Enterprise Server to the latest version that addresses this vulnerability.
Who is affected by CVE-2025-27380?
CVE-2025-27380 affects all authenticated users of Altium Enterprise Server 7.0.3 across all platforms.
What type of vulnerability is CVE-2025-27380?
CVE-2025-27380 is an HTML injection vulnerability that can lead to the execution of arbitrary JavaScript in a user's browser.
What could an attacker do using CVE-2025-27380?
An attacker could use CVE-2025-27380 to execute malicious scripts in the victim's browser, compromising the user's session and data.