CVE-2025-0709

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-0709
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-0709.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-0709
Published
2025-01-24T20:31:05Z
Modified
2026-08-12T03:51:10Z
Severity
  • 5.1 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N CVSS Calculator
Summary
Dcat-Admin Roles Page roles cross site scripting
Details

A vulnerability was found in Dcat-Admin 2.2.1-beta. It has been rated as problematic. This issue affects some unknown processing of the file /admin/auth/roles of the component Roles Page. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

Database specific 
{
    "cna_assigner": "VulDB",
    "cwe_ids": [
        "CWE-79",
        "CWE-94"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/0xxx/CVE-2025-0709.json",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "2.2.1-beta"
                },
                {
                    "last_affected": "2.2.1-beta"
                }
            ],
            "source": "AFFECTED_FIELD"
        }
    ]
}
References

Affected packages

Git / github.com/jqhph/dcat-admin

Affected ranges

Type
GIT
Repo
https://github.com/jqhph/dcat-admin
Events
Introduced
78595ce9c24a7b064de53b4b4d163cb50202e614
Last Affected
78595ce9c24a7b064de53b4b4d163cb50202e614
Database specific
Show details 
{
    "cpe": "cpe:2.3:a:dcatadmin:dcat_admin:2.2.1:beta:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "2.2.1-beta"
        },
        {
            "last_affected": "2.2.1-beta"
        }
    ],
    "source": "CPE_STRING"
}

Affected versions

2.*
2.2.1-beta

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-0709.json"