PT-2025-22351 · Unknown · Konsola Proget

Marcin Węgłowski · CVE-2025-1419 · Published 2025-05-21 · Updated 2025-05-21

Positive Technologies (AI Summary)

CVSS v4.0

2.4

Low

Base vector

AV:A/AC:L/AT:N/PR:H/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N

Name of the Vulnerable Software and Affected Versions Konsola Proget versions prior to 2.17.5

Description The issue is related to improper sanitization of input in the comment section of Konsola Proget, allowing a high-privileged user to perform a Stored Cross-Site Scripting attack.

Recommendations For versions prior to 2.17.5, update to version 2.17.5 to resolve the issue. As a temporary workaround, consider restricting access to the comment section until the update is applied.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-1419

Affected Products

Konsola Proget

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-1419 · Security Note
• https://twitter.com/CVEnew/status/1925185821184811491 · Twitter Post
• https://proget.pl/en/mobile-device-management · Note
• https://t.me/cvetracker/24366 · Telegram Post
• https://cert.pl/en/posts/2025/05/CVE-2025-1415 · Note