CVE-2025-27448: XSS
The web application is susceptible to cross-site-scripting attacks. An attacker who can create new dashboards can inject JavaScript code into the dashboard name which will be executed when the website is loaded.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-27448?
CVE-2025-27448 is a high-severity cross-site scripting vulnerability that can lead to unauthorized execution of JavaScript code.
How do I fix CVE-2025-27448?
To mitigate CVE-2025-27448, sanitize and validate all user inputs in the web application to prevent script injection.
Who is affected by CVE-2025-27448?
CVE-2025-27448 affects users of the Endress Meac300-fnade4 firmware version up to and including 0.16.0.
What types of attacks can exploit CVE-2025-27448?
CVE-2025-27448 can be exploited through cross-site scripting attacks, allowing attackers to run malicious scripts within a victim's browser.
What actions should users take regarding CVE-2025-27448?
Users of affected software should apply security updates and implement input validation measures to prevent exploitation.