HIGH🇵🇱 Wersja polska

CVE-2025-54597

CVSS 7.2v3.1pub. 2025-07-27upd. 2025-08-07

LinuxServer.io Heimdall before 2.7.3 allows XSS via the q parameter.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N

  • Linuxserver Heimdall Application Dashboard

    APP
    Linuxserver
    < 2.7.3
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
XSS
CWE
References

Related vulnerabilities

CVE-2022-47968MEDIUM5.4ten sam produkt

Heimdall Application Dashboard through 2.5.4 allows reflected and stored XSS via "Application name" to the "Ad...

CVE-2025-50578CRITICAL9.8PL ✓ten sam vendor

Host Header Injection i Open Redirect w LinuxServer Docker-Heimdall