CNNVD-202507-951 Information

CNNVD ID

CNNVD-202507-951

CVE-2025-40719

  • CNNVD Published: 2025-07-08

Description (Chinese)

Quiter Gateway是西班牙Quiter公司的一个API接口。 Quiter Gateway 4.7.0之前版本存在跨站脚本漏洞,该漏洞源于id_concesion参数存在反射型跨站脚本,可能导致执行恶意代码。

Description (English)

Quiter Gateway is an API interface for the Spanish company Quiter. The pre-Quiter Gateway 4.7.0 version had a cross-site script loophole, which stemmed from the reflective cross-site script of the id concesion parameter, which could lead to the implementation of a malicious code.

Hazard Level

High

Vulnerability Type

跨站脚本

Affected Vendor

QVidium Technologies

Published

2025-07-08

Last Modified

2026-02-24

References

https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-quiterweb-autoweb-quiter

Patch

https://quiter.com/

Share on: