CNNVD-202506-1841 Information

CNNVD ID

CNNVD-202506-1841

CVE-2025-5990

  • CNNVD Published: 2025-06-15

Description (Chinese)

Crafty Controller是Arcadia的一个 Minecraft 服务器控制面板/启动器。 Crafty Controller存在跨站脚本漏洞,该漏洞源于服务器名称表单和API密钥表单组件输入中和不当,可能导致存储型跨站脚本攻击。

Description (English)

Crafty Contractor is a Minecraft server control panel/starter in Arcadia. Crafty Controller has a cross-site script loophole, which results from inappropriate input of server name forms and API key form components, which may lead to storage-type cross-site script attacks.

Hazard Level

Medium

Vulnerability Type

跨站脚本

Affected Vendor

Arcadia

Published

2025-06-15

Last Modified

2026-02-24

References

https://access.redhat.com/security/cve/cve-2025-5990 https://nvd.nist.gov/vuln/detail/CVE-2025-5990

Share on: