← voltar
CVE-2025-27380

HTML Injection Leading to Script Execution in Altium Enterprise Server

CVSS 7.6 HIGHEPSS 0.2%CWE-79
HTML injection in Project Release in Altium Enterprise Server (AES) 7.0.3 on all platforms allows an authenticated attacker to execute arbitrary JavaScript in the victim’s browser via crafted HTML content.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N
Produtos afetados
Altium · AES

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →