PT-2025-7528 · Unknown · Pankajindevops Scale

0Xnayel · Published 2025-02-22 · Updated 2025-02-26 · CVE-2025-1553

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions pankajindevops scale (affected versions not specified)

Description A vulnerability was found in pankajindevops scale, allowing for cross-site scripting. The manipulation of the goal argument leads to this issue. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. This product uses continuous delivery with rolling releases, and therefore, no version details of affected nor updated releases are available.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Code Injection

Weakness Enumeration

CWE-79

CWE-94

Related Identifiers

CVE-2025-1553

Affected Products

Pankajindevops Scale

References · 12

• 🔥 https://docs.google.com/document/d/1r8Ad7Kaw0bwKZMVFDlhzhpjdque7vRGTDKDeP7yiUEc/edit?tab=t.0#heading=h.ukpd7mmeqiqp · Exploit
• 🔥 https://drive.google.com/file/d/1CRdzTf2bPEB7MshIighYYcVL3IbArBPr/view · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-1553 · Security Note
• https://vuldb.com/?submit.491216 · Note
• https://t.me/cvedetector/18712 · Telegram Post
• https://twitter.com/UndercodeUpdate/status/1894597604626821440 · Twitter Post
• https://t.me/cvenotify/112136 · Telegram Post
• https://docs.google.com/document/d/1r8Ad7Kaw0bwKZMVFDlhzhpjdque7vRGTDKDeP7yiUEc · Note
• https://t.me/cvenotify/112314 · Telegram Post
• https://vuldb.com/?ctiid.296502 · Note
• https://vuldb.com/?id.296502 · Note
• https://twitter.com/CVEnew/status/1893236927572152658 · Twitter Post