PT-2025-30172 · Portabilis · Portabilis I-Diario

Natan Morette + 1 · Published 2025-07-20 · Updated 2025-08-05 · CVE-2025-7870

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Portabilis i-Diario version 1.5.0

Description A problematic issue exists in the justificativas-de-falta component of Portabilis i-Diario. The manipulation of the Anexo argument in the justificativas-de-falta Endpoint leads to cross site scripting. This issue can be exploited remotely. The details of the issue have been publicly disclosed, and the vendor was informed but did not respond.

Recommendations As a mitigation, sanitize or validate the Anexo argument within the justificativas-de-falta Endpoint.

Exploit

Fix

XSS

Code Injection

Weakness Enumeration

CWE-79

CWE-94

Related Identifiers

CVE-2025-7870

Affected Products

Portabilis I-Diario

References · 13

• 🔥 https://github.com/CVE-Hunters/CVE/blob/main/i-diario/CVE-2025-7870.md · Exploit
• 🔥 https://vuldb.com/?submit.607947 · Exploit
• https://osv.dev/vulnerability/CVE-2025-7870 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-7870 · Security Note
• https://t.me/cvenotify/129824 · Telegram Post
• https://twitter.com/jmdevlabs/status/1952727994096611420 · Twitter Post
• https://vuldb.com/?id.316983 · Note
• https://vuldb.com/?ctiid.316983 · Note
• https://t.me/cvetracker/28246 · Telegram Post
• https://t.me/cveNotify/129824 · Telegram Post
• https://twitter.com/marcin_brz81183/status/1946823128899899815 · Twitter Post
• https://t.me/cvenotify/129583 · Telegram Post
• https://twitter.com/CVEnew/status/1946809851146871173 · Twitter Post