PT-2025-54175 · Zhujunliang3 · Work Platform

Icluj2 · Published 2025-12-30 · Updated 2025-12-30 · CVE-2025-15249

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions zhujunliang3 work platform versions prior to 6bc5a50bb527ce27f7906d11ea6ec139beb79c31

Description A cross site scripting issue exists in the Content Handler component of the software. The issue can be triggered remotely through manipulation. The project was notified of the problem but has not yet responded.

Recommendations Update to version 6bc5a50bb527ce27f7906d11ea6ec139beb79c31 or a later version.

Fix

XSS

Code Injection

Weakness Enumeration

CWE-79

CWE-94

Related Identifiers

CVE-2025-15249

Affected Products

Work Platform

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-15249 · Security Note
• https://vuldb.com/?ctiid.338639 · Note
• https://vuldb.com/?id.338639 · Note
• https://twitter.com/VulmonFeeds/status/2006020888160878909 · Twitter Post
• https://gitee.com/zhujunliang3/work_platform/issues/ICLUJ2 · Note