CNNVD-202506-2585 Information
CNNVD ID
CNNVD-202506-2585
Related CVE
- CNNVD Published: 2025-06-19
Description (Chinese)
Luna Imaging是美国Luna Imaging公司的一款用于显示、管理和保存数字档案馆藏的网络托管解决方案。 Luna Imaging 7.5.5.6及之前版本存在代码注入漏洞，该漏洞源于文件/luna/servlet/view/search中参数q操作不当，可能导致跨站脚本攻击。
Description (English)
Luna Imaging is a web-based hosting solution for the display, management and preservation of digital archives by Luna Imaging, a United States company. Luna Imaging 7.5.5.6 and previous versions had a code-injection loophole, which stemmed from the inappropriate operation of the parameter q in the file/luna/servlet/view/search, which could lead to a cross-site script attack.
Hazard Level
High
Vulnerability Type
代码注入
Affected Vendor
Luna Imaging
Published
2025-06-19
Last Modified
2026-02-24
References
https://vuldb.com/?ctiid.313272 https://vuldb.com/?id.313272 https://vuldb.com/?submit.592218 https://access.redhat.com/security/cve/cve-2025-6268
Patch
https://www.lunaimaging.com/downloads
Share on: