PT-2025-31197 · Dece · Dece Software Geodi

Republic + 1 · Published 2025-07-29 · Updated 2025-07-29 · CVE-2025-6060

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions DECE Software Geodi versions prior to 9.0.146

Description The software contains an Improper Neutralization of Input During Web Page Generation, which allows for Cross-Site Scripting (XSS). This issue can potentially allow attackers to inject malicious scripts into web pages viewed by other users.

Recommendations Update DECE Software Geodi to version 9.0.146 or later.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-6060

Affected Products

Dece Software Geodi

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-6060 · Security Note
• https://usom.gov.tr/bildirim/tr-25-0182 · Note
• https://twitter.com/CVEnew/status/1950186960439460103 · Twitter Post
• https://t.me/CVEtracker/28662 · Telegram Post