CVE-2025-41079

概要

参考情報

• incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-seafile · Third Party Advisory

seafile のその他の脆弱性

• CVE-2025-41080中 6.1A stored Cross-Site Scripting (XSS) vulnerability has been found in Seafile v12.0.10. This vulnerability allows an attacker to execute arbit…
• CVE-2023-28874中 6.1The next parameter in the /accounts/login endpoint of Seafile 9.0.6 allows attackers to redirect users to arbitrary sites.
• CVE-2023-28873中 5.4An XSS issue in wiki and discussion pages in Seafile 9.0.6 allows attackers to inject JavaScript into the Markdown editor.
• CVE-2021-30146中 5.4Seafile 7.0.5 (2019) allows Persistent XSS via the "share of library functionality."
• CVE-2013-7469高 7.5Seafile through 6.2.11 always uses the same Initialization Vector (IV) with Cipher Block Chaining (CBC) Mode to encrypt private data, making…