PT-2025-51821 · Proliz Software · Obs

Akıner Kisa · Publicado 2025-12-17 · Atualizado 2026-06-04 · CVE-2025-14347

Positive Technologies (AI Summary)

CVSS v3.1

6.3

Média

Vetor base

AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions Proliz Software Ltd. OBS (Student Affairs Information System) versions prior to 26.5009

Description The software contains a flaw due to improper neutralization of input during web page generation, leading to a Reflected Cross-site Scripting (XSS) condition. This allows for the execution of malicious scripts within the context of a user's browser. The vulnerability exists in the way the application handles user-supplied data when constructing web pages. The vulnerable component is susceptible to injection of malicious code through crafted input.

Recommendations Update to version 26.5009 or later.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2025-14347

Produtos afetados

Obs

Referências · 7

• https://twitter.com/CVEnew/status/2001350815660085706 · Publicação no Twitter
• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0463 · Nota
• https://t.me/CVEtracker/40042 · Publicação no Telegram
• https://t.me/cveNotify/146067 · Publicação no Telegram
• https://usom.gov.tr/bildirim/tr-25-0463 · Nota
• https://t.me/cveNotify/165924 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2025-14347 · Nota de Segurança