PT-2025-29399 · Unknown · Sapido Rb-1802

Havook · Published 2025-07-14 · Updated 2025-07-14 · CVE-2025-7554

Positive Technologies (AI Summary)

CVSS v2.0

3.3

Low

Base vector

AV:N/AC:L/Au:M/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions: Sapido RB-1802 version 1.0.32

Description: A cross-site scripting issue exists in the URL Filtering Page component, specifically within the urlfilter.asp file. The manipulation of the URL address argument can lead to exploitation. The exploit has been publicly disclosed.

Recommendations: Update to a newer version that contains a fix for this issue. As a temporary workaround, consider disabling the URL Filtering Page functionality until a patch is available.

Fix

XSS

Code Injection

Weakness Enumeration

CWE-79

CWE-94

Related Identifiers

CVE-2025-7554

Affected Products

Sapido Rb-1802

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2025-7554 · Security Note
• https://vuldb.com/?ctiid.316252 · Note
• https://t.me/cvenotify/128776 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1944570347698737605 · Twitter Post
• https://vuldb.com/?submit.614901 · Note
• https://vuldb.com/?id.316252 · Note
• https://twitter.com/CVEnew/status/1944566698389962827 · Twitter Post
• https://t.me/cvetracker/27712 · Telegram Post