CVE-2025-65095: falha crítica em lookyloo
Lookyloo is vulnerable due to improper user input sanitization
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
28Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 9.4epss 0.4%
Lookyloo is a web interface that allows users to capture a website page and then display a tree of domains that call each other. Prior to version 1.35.1, there is potential cross-site scripting on index and tree page. This issue has been patched in version 1.35.1.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
Produtos afetados
Lookyloo · lookylooCVEs relacionadas — lookyloo
No mesmo produto, das mais perigosas para as menos.
CVE-2026-55835MEDIUMLookyloo: Potential sub-system DoS due to parameter missmatch in notificationEPSS 0.4%CVE-2025-66459MEDIUMLookyloo vulnerable to XSS due to unescaped error message passed to innerHTMLEPSS 0.3%CVE-2025-66460MEDIUMLookyloo vulnerable to XSS due to lack of escaping in HTML elements passed to DatatablesEPSS 0.2%CVE-2025-66458MEDIUMLookyloo has multiple XSS due to unsafe use of f-strings in MarkupEPSS 0.2%