Skip to content
CVE PROGRAM SOURCE RECORD6.1 Medium

CVE-2025-21572

OpenGrok 1.13.25 has a reflected Cross-Site Scripting (XSS) issue when producing the history view page. This happens through improper handling of path segments. The application ref

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
oracle

Description

OpenGrok 1.13.25 has a reflected Cross-Site Scripting (XSS) issue when producing the history view page. This happens through improper handling of path segments. The application reflects unsanitized user input into the HTML output.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Oracle Corporation OpenGrok

  • 1.13.25affected

References