CVE-2025-21572

OpenGrok 1.13.25 has a reflected Cross-Site Scripting (XSS) issue when producing the history view page

Medium · published May 2, 2025

CVSS v3.1
6.1
EPSS
0%
Percentile
15.2
In the wild
Unconfirmed
What it is

OpenGrok 1.13.25 has a reflected Cross-Site Scripting (XSS) issue when producing the history view page. This happens through improper handling of path segments. The application reflects unsanitized user input into the HTML output.

The record
Technical detail
CVSS v3.1
6.1 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00248 · 15.2th percentile
Published
2025-05-02T21:46Z
EPSS history
Timeline
  • 02 MAY 21:46Z
    OpenGrok 1.13.25 has a reflected Cross-Site Scripting (XSS) issue when producing the history view page
    cvelistv5