Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2025-24338

A vulnerability in the “Manages app data” functionality of the web application of ctrlX OS allows a remote authenticated (lowprivileged) attacker to execute arbitrary client-side c

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
bosch

Description

A vulnerability in the “Manages app data” functionality of the web application of ctrlX OS allows a remote authenticated (lowprivileged) attacker to execute arbitrary client-side code in the context of another user's browser via multiple crafted HTTP requests.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Bosch Rexroth AG ctrlX OS - Solutions

  • 1.12.0 to ≤ 1.12.1affected
  • 1.20.0 to ≤ 1.20.1affected
  • 2.6.0 to ≤ 2.6.0affected

References