PT-2026-29209 · Unknown · Anon Proxy Server

Rafael Pedrero · Publicado 2026-03-31 · Atualizado 2026-03-31 · CVE-2025-41355

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Anon Proxy Server version 0.104

Description A Reflected Cross-Site Scripting (XSS) issue exists in Anon Proxy Server. This allows an attacker to execute JavaScript code in a victim’s browser through a malicious URL. This could lead to the theft of sensitive user data, such as session cookies, or actions performed on behalf of the user. The issue affects the port and proxyPort parameters in the '/anon.php' endpoint.

Recommendations Update to a newer version that contains a fix for this vulnerability.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2025-41355

Produtos afetados

Anon Proxy Server

Referências · 4

• https://incibe.es/en/incibe-cert/notices/aviso/reflected-cross-site-scripting-xss-anon-proxy-server · Nota
• https://twitter.com/CVEnew/status/2038916012377268727 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2025-41355 · Nota de Segurança
• https://twitter.com/incibe_cert/status/2038897676733890572 · Publicação no Twitter