CVE-2025-30755

OpenGrok 1.14.1 has a reflected Cross-Site Scripting (XSS) issue when producing the cross reference page

Medium · published September 18, 2025

CVSS v3.1
6.1
EPSS
0%
Percentile
9.7
In the wild
Unconfirmed
What it is

OpenGrok 1.14.1 has a reflected Cross-Site Scripting (XSS) issue when producing the cross reference page. This happens through improper handling of the revision parameter. The application reflects unsanitized user input into the HTML output.

The record
Technical detail
CVSS v3.1
6.1 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00202 · 9.7th percentile
Published
2025-09-18T23:32Z
EPSS history
Timeline
  • 18 SEP 23:32Z
    OpenGrok 1.14.1 has a reflected Cross-Site Scripting (XSS) issue when producing the cross reference page
    cvelistv5