Skip to content
OpenAdvisories
High WID-SEC-2025-1435 3 CVEs

IBM Storage Scale: Mehrere Schwachstellen

Published Jun 30, 2025 · Updated Jun 30, 2025 · de-DE

Vendor: IBM Product: Storage Scale Platform: Linux Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in IBM Storage Scale ausnutzen, um einen Denial of Service Angriff durchzuführen, und um Informationen offenzulegen.

Product

IBM Storage Scale ist eine Lösung für das Management großer unstrukturierter Datenmengen.

Vulnerabilities 3

  • High 8.2
    CVE-2025-43865 Public exploit

    React Router allows pre-render data spoofing on React-Router framework mode

    React Router is a router for React. In versions on the 7.0 branch prior to version 7.5.2, it's possible to modify pre-rendered data by adding a header to the request. This allows to completely spoof its contents and modify all the values ​​of the data object …

    remix-run react-router react-router npm
  • High 7.5
    CVE-2025-43864 Public exploit EPSS 20%

    React Router allows a DoS via cache poisoning by forcing SPA mode

    React Router is a router for React. Starting in version 7.2.0 and prior to version 7.5.2, it is possible to force an application to switch to SPA mode by adding a header to the request. If the application uses SSR and is forced to switch to SPA, this causes a…

    remix-run react-router react-router npm
  • High 7.5
    CVE-2025-48050

    In DOMPurify through 3.2.5 before 6bc6d60, scripts/server.js does not ensure that a pathname is located under the curre…

    cure53 DOMPurify node-dompurify node-dompurify Debian Ubuntu

Revision history

  1. #1

    Initiale Fassung

References