漏洞关键信息 漏洞类型 Authenticated Stored Cross-Site Scripting (XSS) 严重性 Severity: High (7.3 / 10) 影响版本 Affected versions: <=2025.96 修复版本 Patched version: 2025.102 影响 A Stored Cross-Site Scripting (XSS) vulnerability allows authenticated users to execute malicious JavaScript in the context of other logged-in users by uploading malicious JavaScript files in the web UI. 修复建议 SysReptor admins should review their systems for uploaded, malicious files (e.g., ending in .js; optionally .html and .htm). Check the following paths in the Django admin interface: - /admin/pentests/uploadedasset/ - /admin/pentests/uploadedimage/ - /admin/pentests/uploadedprojectfile/ - /admin/pentests/uploadedtemplateimage/ - /admin/pentests/uploadedusernotebookfile/ - /admin/pentests/uploadedusernotebookimage/ Use the provided script to automate the search. 漏洞报告和修复 Reported on: 04/12/2025 8:36am UTC by @slashsec1 (David Wind) Fixed on: 04/12/2025 4:09pm in 2025.102 CVSS v3 Base Metrics Attack vector: Network Attack complexity: Low Privileges required: Low User interaction: Required Scope: Unchanged Confidentiality: High Integrity: High Availability: None CVE ID CVE-2025-66561 Weaknesses CWE-79 Credits Finder: @slashsec1