CNNVD-202602-723 Information

CNNVD ID

CNNVD-202602-723

CVE-2025-41085

  • CNNVD Published: 2026-02-04

Description (Chinese)

Apidog Web Platform是Apidog公司的一个接口调用工具。 Apidog Web Platform 2.7.15版本存在跨站脚本漏洞,该漏洞源于SVG图像上传清理不当,可能导致存储型跨站脚本攻击。

Description (English)

Apidog Web Platform is an interface call tool for Apidog. Version 2.7.15 of Apidog Web Platform contains a cross-site script loophole, which stems from the inappropriate uploading and clean-up of SVG images, which may result in a storage-type cross-site script attack.

Hazard Level

High

Vulnerability Type

跨站脚本

Affected Vendor

Apidog

Published

2026-02-04

Last Modified

2026-02-24

References

https://www.incibe.es/en/incibe-cert/notices/aviso/stored-cross-site-scripting-xss-apidog-web-platform

Share on: