Description
A host header injection vulnerability in SysPass 3.2x allows an attacker to load malicious JS files from an arbitrary domain which would be executed in the victim's browser.
High · 8.1
CVE-2025-25477
EUVD-2025-5488GHSA-jv4p-6m84-hhpv
A host header injection vulnerability in SysPass 3.2x allows an attacker to load malicious JS files from an arbitrary domain which would be…
Published Feb 27, 2025 · Updated Feb 28, 2025 · Assigned by mitre