CVE-2025-27379 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A stored cross-site scripting (XSS) vulnerability in the BOM Viewer in Altium AES 7.0.3 allows an authenticated attacker to inject arbitrary JavaScript into the…
Medium CVSS: 6.8

CVE-2025-27379

A stored cross-site scripting (XSS) vulnerability in the BOM Viewer in Altium AES 7.0.3 allows an authenticated attacker to inject arbitrary JavaScript into the Description field of a schematic, which is executed when the BOM Viewer renders the affected content.
Vendor
Altium
Product
On-prem Enterprise Server
CWE
CWE-79
Yayın Tarihi
2026-01-22 02:15:51
Güncelleme
2026-02-26 21:24:23
Source Identifier
4760f414-e1ae-4ff1-bdad-c7a9c3538b79
KEV Date Added
-

Kategoriler

Referanslar