CVE-2025-30143: XSS
Rule 3000216 (before version 2) in Akamai App & API Protector (with Akamai ASE) before 2024-12-10 does not properly consider JavaScript variable assignment to built-in functions and properties.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-30143?
CVE-2025-30143 has been classified with a medium severity level due to the potential for JavaScript variable assignment vulnerabilities leading to security issues.
How do I fix CVE-2025-30143?
To address CVE-2025-30143, upgrade Akamai App & API Protector to version 2 or later prior to the release date of December 10, 2024.
What are the implications of CVE-2025-30143 on my application?
CVE-2025-30143 may allow attackers to bypass security measures through obfuscated payloads, leading to potential reflected cross-site scripting vulnerabilities.
Is my version of Akamai App & API Protector affected by CVE-2025-30143?
If you are using a version of Akamai App & API Protector prior to version 2, you are affected by CVE-2025-30143.
When was CVE-2025-30143 disclosed?
CVE-2025-30143 was disclosed as a vulnerability affecting versions of Akamai App & API Protector before December 10, 2024.