PT-2025-30187 · Unknown · Huashengdun Webssh

·

CVE-2025-7885

·

Publicado

2025-07-20

·

Atualizado

2025-09-15

CVSS v3.1

6.1

Média

VetorAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions Huashengdun WebSSH versions up to 1.6.2
Description A problematic issue exists in Huashengdun WebSSH related to the Login Page component. The manipulation of the hostname/port argument can lead to cross site scripting. This issue may be exploited remotely, and the exploit has been publicly disclosed. The vendor was contacted but did not respond.
Recommendations Update Huashengdun WebSSH to a version newer than 1.6.2.

Exploit

Correção

XSS

Code Injection

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2025-7885
GHSA-9CG4-9HV5-3376
PYSEC-2025-234

Produtos afetados

Huashengdun Webssh