CVE-2025-41080: Multiple vulnerabilities in Seafile
A stored Cross-Site Scripting (XSS) vulnerability has been found in Seafile v12.0.10. This vulnerability allows an attacker to execute arbitrary code in the victim's browser by storing malicious payloads with POST parámetro 'p' in '/api/v2.1/repos/{repoid}/file/'.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-41080?
CVE-2025-41080 is classified as a medium severity stored Cross-Site Scripting (XSS) vulnerability.
How do I fix CVE-2025-41080?
To fix CVE-2025-41080, upgrade Seafile to the latest version where the vulnerability has been patched.
What kind of attack can be executed through CVE-2025-41080?
CVE-2025-41080 allows attackers to execute arbitrary code in a victim's browser by storing malicious payloads.
Which versions of Seafile are affected by CVE-2025-41080?
CVE-2025-41080 affects Seafile version 12.0.10 and possibly earlier versions.
How can I mitigate the risks associated with CVE-2025-41080?
To mitigate risks from CVE-2025-41080, validate and sanitize all user inputs and upgrade to a patched version of Seafile.