PT-2025-18773 · Sambabox · Sambabox

Ali Kazar · Published 2025-05-02 · Updated 2025-09-12 · CVE-2025-2488

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions SambaBox versions prior to 5.1

Description The issue affects SambaBox, allowing Cross-Site Scripting (XSS) due to improper neutralization of input during web page generation.

Recommendations For versions prior to 5.1, update to version 5.1 or later to resolve the issue.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-2488

Affected Products

Sambabox

References · 10

• https://osv.dev/vulnerability/CVE-2025-2488 · Vendor Advisory
• https://sambabox.io/2025/04/14/version-5-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-2488 · Security Note
• https://twitter.com/CVEnew/status/1918568485913014442 · Twitter Post
• https://t.me/cvenotify/120614 · Telegram Post
• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0101 · Note
• https://t.me/cvedetector/24343 · Telegram Post
• https://t.me/cvetracker/22934 · Telegram Post
• https://usom.gov.tr/bildirim/tr-25-0101 · Note
• https://t.me/cveNotify/135213 · Telegram Post