CVE-2025-1484CWE-184

A vulnerability exists in the media upload component of the Asset Suite versions listed below

Medium · published May 30, 2025

CVSS v4.0
6.3
EPSS
0%
Percentile
14.2
In the wild
Unconfirmed
What it is

A vulnerability exists in the media upload component of the Asset

Suite versions listed below. If successfully exploited an attacker

could impact the confidentiality or integrity of the system. An attacker can use this vulnerability to construct a request that will

cause JavaScript code supplied by the attacker to execute within

the user’s browser in the context of that user’s session with the

application.

The record
Technical detail
CVSS v4.0
6.3 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:H/SI:H/SA:N
EPSS
0.00239 · 14.2th percentile
Weakness
CWE-184 · Incomplete List of Disallowed Inputs
Published
2025-05-30T12:26Z
EPSS history
Timeline
  • 30 MAY 12:26Z
    A vulnerability exists in the media upload component of the Asset Suite versions listed below
    cvelistv5