CVE-2025-24297 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Due to lack of server-side input validation, attackers can inject malicious JavaScript code into users personal spaces of the web portal.
Critical CVSS: 9.3

CVE-2025-24297

Due to lack of server-side input validation, attackers can inject malicious JavaScript code into users personal spaces of the web portal.
Vendor
Growatt
Product
Cloud Portal
CWE
CWE-79
Yayın Tarihi
2025-04-15 22:15:15
Güncelleme
2025-11-14 18:14:47
Source Identifier
ics-cert@hq.dhs.gov
KEV Date Added
-

Kategoriler

CWE-79 Cloud Portal CRITICAL Growatt 2025

Referanslar

https://www.cisa.gov/news-events/ics-advisories/icsa-25-105-04