CNNVD-202601-3958 Information

CNNVD ID

CNNVD-202601-3958

CVE-2025-67231

  • CNNVD Published: 2026-01-23

Description (Chinese)

ToDesktop Builder是爱尔兰ToDesktop公司的一个桌面应用构建工具。 ToDesktop Builder v0.33.1版本存在安全漏洞,该漏洞源于反射型跨站脚本,可能导致攻击者通过特制有效载荷在用户浏览器环境中执行任意代码。

Description (English)

ToDesktop Builder is a desktop application builder for ToDesktop, Ireland. There is a security loophole in version ToDesktop Builder v. 0.33.1, which originates from a reflector-type cross-site script and may result in the assailants enforcing any code in the user browser environment through a specially designed payload.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

ToDesktop

Published

2026-01-23

Last Modified

2026-02-24

References

https://www.todesktop.com/changelog https://www.todesktop.com/security/advisories/TDSA-2025-003 https://access.redhat.com/security/cve/cve-2025-67231

Patch

https://www.todesktop.com/

Share on: