CNNVD-202510-2309 Information
Oct 16, 2025
cve
CNNVD ID
CNNVD-202510-2309
Related CVE
- CNNVD Published: 2025-10-16
Description (Chinese)
MQTTX是EMQ Technologies开源的一个MQTT客户端工具箱。 MQTTX 1.12.0版本存在跨站脚本漏洞，该漏洞源于MQTT消息有效载荷渲染处理不当，可能导致跨站脚本攻击。
Description (English)
MQTTX is a MQTT client toolbox that is open to EMQ Technologies. Version 1.12.0 of MQTTX has a cross-site script loophole, which stems from the mishandling of MQTT message payloads, which may lead to cross-site script attacks.
Hazard Level
High
Vulnerability Type
跨站脚本
Affected Vendor
EMQ Technologies
Published
2025-10-16
Last Modified
2026-02-24
References
https://github.com/emqx/MQTTX/commit/2963f78a4b3227cdb93597f546a75b75dee1059f https://github.com/emqx/MQTTX/security/advisories/GHSA-29gf-9r9v-j4m3 https://access.redhat.com/security/cve/cve-2025-62413