CVE-2025-7872: Portabilis i-Diario justificativas-de-falta cross site scripting
A weakness has been identified in Portabilis i-Diario 1.5.0. This affects an unknown function of the file /justificativas-de-falta. Executing a manipulation of the argument Justificativa can lead to cross site scripting. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks. This patch is called 821342cd8d952e8bd214cb16145da785a92f5681. Applying a patch is advised to resolve this issue. The vendor confirms: "Audited values shown on that screen are now sanitized on output".
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Portabilis i-Diarioto a version that resolves this vulnerability.Patch 821342cd8d952e8bd214cb16145da785a92f5681
Event History
Frequently Asked Questions
What is the severity of CVE-2025-7872?
CVE-2025-7872 is classified as a problematic vulnerability affecting Portabilis i-Diario 1.5.0.
How do I fix CVE-2025-7872?
To fix CVE-2025-7872, it is recommended to validate and sanitize user input on the /justificativas-de-falta file to prevent cross-site scripting.
What types of attacks can be executed due to CVE-2025-7872?
CVE-2025-7872 allows for remote cross-site scripting attacks due to improper input handling.
Which versions of Portabilis i-Diario are affected by CVE-2025-7872?
CVE-2025-7872 affects Portabilis i-Diario version 1.5.0.
Can CVE-2025-7872 be exploited without local access?
Yes, CVE-2025-7872 can be exploited remotely, making it a significant security concern.