CVE-2025-40891: HTML injection in in Time Machine functionality in Guardian/CMC before 25.5.0
A Stored HTML Injection vulnerability was discovered in the Time Machine Snapshot Diff functionality due to improper validation of network traffic data. An unauthenticated attacker can send specially crafted network packets at two different times to inject HTML tags into asset attributes across two snapshots. Exploitation requires a victim to use the Time Machine Snapshot Diff feature on those specific snapshots and perform specific GUI actions, at which point the injected HTML renders in their browser, enabling phishing and open redirect attacks. Full XSS exploitation is prevented by input validation and Content Security Policy. Attack complexity is high due to multiple required conditions.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-40891?
CVE-2025-40891 is classified as a high severity vulnerability due to the potential for stored HTML injection.
How do I fix CVE-2025-40891?
To fix CVE-2025-40891, it is recommended to update the Guardian CMC software to a version above 25.5.0.
Who is affected by CVE-2025-40891?
CVE-2025-40891 affects users of Guardian CMC versions up to 25.5.0.
What type of attack is enabled by CVE-2025-40891?
CVE-2025-40891 allows unauthenticated attackers to perform stored HTML injection through specially crafted network packets.
What are the potential impacts of CVE-2025-40891?
The potential impacts of CVE-2025-40891 include unauthorized manipulation of web page content and possible phishing attacks.