PT-2025-20649

CVE-2025-47828

·

Published

2025-05-11

·

Updated

2026-09-27

Description by

CVSS 3.1
6.4
Medium
MetricsAV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions Lumi H5P-Nodejs-library versions prior to 9.3.3
Description The issue is related to the omission of a sanitizeHtml call for plain text strings. This could potentially lead to security issues, although specific details about the estimated number of affected devices or real-world incidents are not provided.
Recommendations For versions prior to 9.3.3, update to version 9.3.3 or later to resolve the issue. As a temporary workaround, consider implementing additional sanitization for plain text strings to minimize the risk of exploitation.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Related identifiers
GHSA-M7GM-V253-56HH
Found an issue in the description? Have something to add? Feel free to write us 👾