CNNVD-202512-240 Information

CNNVD ID

CNNVD-202512-240

CVE-2025-40700

  • CNNVD Published: 2025-12-02

Description (Chinese)

IDI Eikon Governalia是西班牙IDI Eikon公司的一个电子政务和智慧城市软件平台。 IDI Eikon Governalia存在跨站脚本漏洞,该漏洞源于反射型跨站脚本,可能导致执行恶意JavaScript代码。

Description (English)

IDI Eikon Governalia is a Spanish IDI Eikon software platform for e-government and smart cities. IDI Eikon Governalia had a cross-site script loophole, which originated in a reflector-type cross-site script and could lead to the implementation of malicious JavaScript code.

Hazard Level

High

Vulnerability Type

跨站脚本

Affected Vendor

IDI Eikon

Published

2025-12-02

Last Modified

2026-02-24

References

https://governalia.es/ https://www.incibe.es/en/incibe-cert/notices/aviso/reflected-cross-site-scripting-xss-governalia-idi-eikon

Patch

https://www.idieikon.com/

Share on: