PT-2025-23402 · Astun Technology · Astun Technology Ishare Maps

Alexandre Rodrigo · Published 2025-05-31 · Updated 2026-01-30 · CVE-2025-5377

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Astun Technology iShare Maps version 5.4.0

Description A issue was found in the file historic1.asp, where the manipulation of the Zoom argument leads to cross site scripting. This can be exploited remotely. The vendor was contacted about this disclosure but did not respond.

Recommendations For Astun Technology iShare Maps version 5.4.0, as a temporary workaround, consider restricting access to the historic1.asp file until a patch is available. Avoid using the Zoom argument in the affected file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

Fix

XSS

Code Injection

Weakness Enumeration

CWE-79

CWE-94

Related Identifiers

CVE-2025-5377

Affected Products

Astun Technology Ishare Maps

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2025-5377 · Security Note
• https://osv.dev/vulnerability/CVE-2025-5377 · Vendor Advisory
• https://vuldb.com/?id.310670 · Note
• https://t.me/cvetracker/25083 · Telegram Post
• https://vuldb.com/?submit.582835 · Note
• https://vuldb.com/?ctiid.310670 · Note
• https://twitter.com/CVEnew/status/1928799330183557620 · Twitter Post
• https://t.me/cveNotify/150337 · Telegram Post
• https://t.me/cvenotify/124243 · Telegram Post