CNNVD-202509-154 Information
Sep 02, 2025
cve
CNNVD ID
CNNVD-202509-154
Related CVE
- CNNVD Published: 2025-09-02
Description (Chinese)
uTools是中国猿力（uTools）公司的一个自定义工具平台。 uTools 7.1.1及之前版本存在安全漏洞，该漏洞源于PDF预览功能处理不当，可能导致跨站脚本攻击。
Description (English)
uTools is a self-defined tool platform for uTools. uTools 7.1.1 and previous versions had a security loophole, which stemmed from the inappropriate handling of the PDF preview function and could result in a cross-site script attack.
Hazard Level
High
Vulnerability Type
其他
Affected Vendor
猿力
Published
2025-09-02
Last Modified
2026-02-24
References
https://t1sts.github.io/2025/09/01/CVE-2025-51966/ https://t1sts.github.io/2025/05/27/uTools-has-an-XSS-vulnerability/ https://nvd.nist.gov/vuln/detail/CVE-2025-51966 https://access.redhat.com/security/cve/cve-2025-51966
Patch
https://www.u-tools.cn/download/
Share on: