PT-2025-43999 · Unknown · Rubikon Banking Solution

CVE-2025-60983 · Publicado 2025-10-27 · Atualizado 2025-10-27

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Média

Vetor base

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Rubikon Banking Solution version 4.0.3

Description A reflected cross-site scripting issue exists in the "Search For Customers Information" endpoints of Rubikon Banking Solution. This allows for the injection of malicious scripts through reflected input. The Search For Customers Information endpoint is vulnerable. The vulnerable parameter is not specified.

Recommendations Apply input validation and output encoding to the Search For Customers Information endpoint to prevent the injection of malicious scripts.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2025-60983

Produtos afetados

Rubikon Banking Solution

Referências · 3

• 🔥 https://github.com/handyteddy/Security-Advisories/blob/main/Rubikon-XSS.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-60983 · Nota de Segurança
• https://twitter.com/CVEnew/status/1982867552695881791 · Publicação no Twitter