CVE-2022-25620

CRITICAL 9.0CVE-2022-25620 · Published 30/03/2022 · updated 17/06/2026

In short

CVE-2022-25620 is a CRITICAL (CVSS 9.0) vulnerability affecting sambabox (profelis).
Chance of exploitation in the next 30 days (EPSS): 0.44%, higher than 38.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
sambabox profelis	`≤ 4.0`	No fix yet

Description

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Group Functionality of Profelis IT Consultancy SambaBox allows AUTHENTICATED user to cause execute arbitrary codes on the vulnerable server. This issue affects: Profelis IT Consultancy SambaBox 4.0 version 4.0 and prior versions on x86.

References

sambabox.io/sambabox-surum-4-0 · Release Notes

More vulnerabilities in sambabox

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free