PT-2025-24003 · Unknown · Soluçõescoop Isoluçõesweb

Syrtain · Published 2025-06-06 · Updated 2025-06-06 · CVE-2025-5713

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions SoluçõesCoop iSoluçõesWEB versions prior to 20250519

Description A problem was found in some unknown functionality of the file /fluxos-dashboard of the component Flow Handler. The manipulation of the Descrição da solicitação argument leads to cross site scripting attacks. These attacks can be executed remotely. The exploit has been publicly disclosed and could be used.

Recommendations For versions prior to 20250519, update the affected component to resolve the issue. As a temporary workaround, consider restricting access to the /fluxos-dashboard file of the Flow Handler component to minimize the risk of exploitation. Avoid using the Descrição da solicitação argument in the affected functionality until the issue is resolved.

Exploit

Fix

XSS

Code Injection

Weakness Enumeration

CWE-79

CWE-94

Related Identifiers

CVE-2025-5713

Affected Products

Soluçõescoop Isoluçõesweb

References · 9

• 🔥 https://github.com/lfparizzi/CVE-SolucoesCoop · Exploit
• 🔥 https://github.com/lfparizzi/CVE-SolucoesCoop#stored-xss · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-5713 · Security Note
• https://osv.dev/vulnerability/CVE-2025-5713 · Vendor Advisory
• https://vuldb.com/?submit.579504 · Note
• https://t.me/cvenotify/124853 · Telegram Post
• https://t.me/cvetracker/25565 · Telegram Post
• https://vuldb.com/?ctiid.311234 · Note
• https://vuldb.com/?id.311234 · Note