PT-2025-23283 · Unknown · Asset Suite

Published 2025-05-30 · Updated 2025-07-15 · CVE-2025-1484

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Asset Suite versions (affected versions not specified)

Description A vulnerability exists in the media upload component. If successfully exploited, an attacker could impact the confidentiality or integrity of the system. An attacker can use this vulnerability to construct a request that will cause JavaScript code supplied by the attacker to execute within the user’s browser in the context of that user’s session with the application.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incomplete List of Disallowed Inputs

Weakness Enumeration

CWE-184

Related Identifiers

CVE-2025-1484

Affected Products

Asset Suite

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-1484 · Security Note
• https://t.me/cvetracker/25004 · Telegram Post
• https://publisher.hitachienergy.com/preview?DocumentID=8DBD000212&LanguageCode=en&DocumentPartId=&Action=Launch · Note
• https://twitter.com/0dayPublishing/status/1945158688236315015 · Twitter Post
• https://twitter.com/CVEnew/status/1928438430653898870 · Twitter Post