CVE-2025-61949: XSS
LogStare Collector contains a stored cross-site scripting vulnerability in UserManagement. If crafted user information is stored, an arbitrary script may be executed on the web browser of the user who logs in to the product's management page.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-61949?
CVE-2025-61949 is classified as a high severity vulnerability due to its potential for arbitrary script execution on affected systems.
How do I fix CVE-2025-61949?
To fix CVE-2025-61949, ensure that you sanitize and validate user inputs properly before storing them in the UserManagement component.
What are the consequences of exploiting CVE-2025-61949?
Exploitation of CVE-2025-61949 can lead to unauthorized script execution in the web browser of any user accessing the management page.
Which versions of LogStare Collector are affected by CVE-2025-61949?
CVE-2025-61949 affects all versions of LogStare Collector with the UserManagement feature enabled.
Is there a workaround for CVE-2025-61949?
A temporary workaround for CVE-2025-61949 includes avoiding the use of untrusted or unverified user inputs in the application.