PT-2025-53843 · Sohu · Sohutv Cachecloud
CVSS v3.1
6.1
Medium
| Vector | AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
SohuTV CacheCloud versions prior to 3.2.1
Description
A cross site scripting issue exists in SohuTV CacheCloud. The issue is located in the
init function within the file src/main/java/com/sohu/cache/web/controller/LoginController.java. This allows for remote attacks. The exploit is publicly available.Recommendations
Update SohuTV CacheCloud to version 3.2.1 or later. As a temporary workaround, consider restricting access to the
init function within the LoginController.java file.Exploit
Fix
XSS
Code Injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Sohutv Cachecloud