PT-2025-15324 · Unknown · Vulnerability-Lookup

Published 2025-04-08 · Updated 2025-04-08 · CVE-2025-32413

Positive Technologies (AI Summary)

CVSS v3.1

6.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions: Vulnerability-Lookup versions prior to 2.7.1

Description: The issue allows stored XSS via a user bio in the website/web/views/user.py file. This can potentially lead to malicious script execution when a user views the affected bio.

Recommendations: For versions prior to 2.7.1, consider disabling the user bio feature in website/web/views/user.py until a patch is available. Restrict access to the user bio section to minimize the risk of exploitation. Avoid displaying user bios from untrusted sources in the affected API endpoint until the issue is resolved.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-32413

Affected Products

Vulnerability-Lookup

References · 7

• https://osv.dev/vulnerability/CVE-2025-32413 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-32413 · Security Note
• https://github.com/vulnerability-lookup/vulnerability-lookup/compare/v2.7.0...v2.7.1 · Note
• https://github.com/vulnerability-lookup/vulnerability-lookup/commit/0a120af1de4a0a13bc2e2000f3c4639291122ba0 · Note
• https://t.me/cvenotify/118143 · Telegram Post
• https://t.me/cvetracker/21069 · Telegram Post
• https://t.me/cvedetector/22393 · Telegram Post