CVE-2025-3391: hailey888 oa_system Backend AddrController. java outAddress cross site scripting
A vulnerability has been found in hailey888 oasystem up to 2025.01.01 and classified as problematic. Affected by this vulnerability is the function outAddress of the file cn/gson/oass/controller/address/AddrController. java of the component Backend. The manipulation of the argument outtype leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-3391?
CVE-2025-3391 is classified as a problematic vulnerability affecting the backend component of the hailey888 oa_system.
How do I fix CVE-2025-3391?
To fix CVE-2025-3391, update the hailey888 oa_system to a version later than 2025.01.01.
What component is affected by CVE-2025-3391?
CVE-2025-3391 affects the outAddress function in the AddrController.java file of the backend component.
In which version of hailey888 oa_system is CVE-2025-3391 found?
CVE-2025-3391 is found in hailey888 oa_system versions up to and including 2025.01.01.
What type of manipulation does CVE-2025-3391 involve?
CVE-2025-3391 involves manipulation of an argument within the affected function.