CVE-2025-64759: fallo de gravedad alta en homarr-labs homarr
Homarr is Vulnerable to Stored Cross-Site Scripting (XSS) and Possible Privilege Escalation via Malicious SVG Upload
Publicada el
21Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 8.1epss 0.3%
probabilidad de explotación
0.3%top 77% de las CVE
explotación observada
noninguna fuente lo reporta
Homarr is an open-source dashboard. Prior to version 1.43.3, stored XSS vulnerability exists, allowing the execution of arbitrary JavaScript in a user's browser, with minimal or no user interaction required, due to the rendering of a malicious uploaded SVG file. This could be abused to add an attacker's account to the "credentials-admin" group, giving them full administrative access, if a user logged in as an administrator was to view the page which renders or redirects to the SVG. This issue has been patched in version 1.43.3.
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:N
Productos afectados
homarr-labs · homarrCVEs relacionadas — homarr-labs homarr
En el mismo producto, de las más peligrosas a las menos.
CVE-2026-27796MEDIUMHomarr: Unauthenticated Information Disclosure (Integration Metadata Leak)EPSS 1.2%CVE-2026-27797MEDIUMHomarr: Unauthenticated SSRF in rssFeed.tsEPSS 0.5%CVE-2026-33510HIGHDOM-Based XSS in Homarr /auth/login RedirectEPSS 0.3%CVE-2025-67493HIGHHomarr: missing input sanitization and possible privilege escalation through ldap search query injectionEPSS 0.3%CVE-2026-25123MEDIUMHomarr affected by Unauthenticated SSRF / Port-Scan Primitive via widget.app.pingEPSS 0.3%CVE-2026-32602MEDIUMHomarr has a Race Condition in Invite Token Registration (TOCTOU)EPSS 0.2%