CVE-2025-41079: Multiple vulnerabilities in Seafile
A stored Cross-Site Scripting (XSS) vulnerability has been found in Seafile v12.0.10. This vulnerability allows an attacker to execute arbitrary code in the victim's browser by storing malicious payloads with PUT parámetro 'name' in '/api/v2.1/user/'.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-41079?
CVE-2025-41079 is classified as a medium to high severity stored Cross-Site Scripting (XSS) vulnerability.
How do I fix CVE-2025-41079?
To fix CVE-2025-41079, update Seafile to the latest version where this vulnerability has been patched.
What are the consequences of CVE-2025-41079?
Exploitation of CVE-2025-41079 can allow attackers to execute arbitrary code in users' browsers, potentially leading to data theft or session hijacking.
Who is affected by CVE-2025-41079?
CVE-2025-41079 affects users of Seafile version 12.0.10 and possibly earlier versions.
How can I detect CVE-2025-41079 in my environment?
You can detect CVE-2025-41079 by reviewing logs and monitoring for unusual activity related to the Seafile API and stored payloads.