Skip to content
CVE PROGRAM SOURCE RECORD5.1 Medium

CVE-2025-11146

Reflected Cross-site scripting (XSS) vulnerability in Apt-Cacher-NG

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
INCIBE

Description

Reflected Cross-site scripting (XSS) in Apt-Cacher-NG v3.2.1. The vulnerability allows an attacker to execute malicious scripts (XSS) in the web management application. The vulnerability is caused by improper handling of GET inputs included in the URL in “/acng-report.html”.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Apt-Cacher-NG Apt-Cacher-NG

Default version status: unaffected

  • 3.2.1affected

References