CVE-2025-41080mediumCWE-79

CVE-2025-41080: medium-severity vulnerability in Seafile

Multiple vulnerabilities in Seafile

Published

Follow this CVE+ Monitor Seafile

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.1epss 0.2%
A stored Cross-Site Scripting (XSS) vulnerability has been found in Seafile v12.0.10. This vulnerability allows an attacker to execute arbitrary code in the victim's browser by storing malicious payloads with POST parámetro 'p' in '/api/v2.1/repos/{repo_id}/file/'.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
Affected products
Seafile · Seafile
Related CVEs — Seafile

In the same product, most dangerous first.

CVE-2025-41079MEDIUMMultiple vulnerabilities in SeafileEPSS 0.2%