CNNVD-202510-718 Information

Oct 05, 2025 cve

CNNVD ID

CNNVD-202510-718

CVE-2025-11308

CNNVD Published: 2025-10-05

Description (Chinese)

Vanderlande Baggage 360是荷兰Vanderlande公司的一款机场行李处理系统。 Vanderlande Baggage 360 7.0.0版本存在安全漏洞，该漏洞源于对文件/api-addons/v1/messages中参数Message的错误操作，可能导致跨站脚本攻击。

Description (English)

Vanderlande Baggage 360 is an airport baggage handling system operated by the Netherlands company Vanderlande. There is a security loophole in Vanderlande Baggage 360 7.0.0, which stems from an error in the Message parameter in the document/api-addons/v1/messages, which could lead to a cross-site script attack.

Hazard Level

Critical

Vulnerability Type

其他

Affected Vendor

Vanderlande

Published

2025-10-05

Last Modified

2026-02-24

References

https://github.com/YasserREED/YasserREED-CVEs/blob/main/Vanderlande-OpenAIR-Baggage360/Stored%20Cross-Site%20Scripting%20(XSS).md https://github.com/YasserREED/YasserREED-CVEs/blob/main/Vanderlande-OpenAIR-Baggage360/Stored%20Cross-Site%20Scripting%20(XSS).md# https://vuldb.com/?ctiid.327189 https://vuldb.com/?id.327189 https://vuldb.com/?submit.662216

Share on: