> CVE-2025-4804

« BACK_TO_HOME
PUBLISHED
2025-05-16 21:15
MODIFIED
2025-05-19 13:35
EPSS (Prob. Exploit)
0.46%
Top 59.5%
DATA SOURCES:
NVD 🔗 2025-10-18 CVE PROJECT 🔗 2026-01-19 FIRST EPSS 🔗 2026-11-08 GITHUB 🔗 2026-11-04

> DESCRIPTION

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS allows Stored XSS via the spamBlocker module. This vulnerability requires an authenticated administrator session to a locally managed Firebox. This issue affects Fireware OS: from 12.0 through 12.11.1.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> GITHUB SECURITY ADVISORY

GHSA-pcxq-fjp3-r752 HIGH

Ash has authorization bypass when bypass policy condition evaluates to true

AFFECTED PACKAGES:
ERLANG / ash
>= 3.6.3, <= 3.7.0
Fixed in: 3.7.1

> HISTORIQUE DES MODIFICATIONS

Première apparition
16/05/2025 21:15
Source: NVD
📊 ENRICHISSEMENT 18/10/2025 15:03
CVEPROJECT
Champ modifié: CVE Project
Ancienne valeur:
Non
Nouvelle valeur:
Oui
Total des modifications: 1 Dernière mise à jour: 1 year ago
« BACK_TO_HOME