CVE-2025-5411

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2025-5411

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-5411.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2025-5411

Published

2025-06-01T23:00:19.416Z

Modified

2026-07-15T01:49:10.111178589Z

Severity

5.1 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N CVSS Calculator

Summary

Mist Community Edition views.py tag_resources cross site scripting

Details

A vulnerability was found in Mist Community Edition up to 4.7.1. It has been rated as problematic. This issue affects the function tag_resources of the file src/mist/api/tag/views.py. The manipulation of the argument tag leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 4.7.2 is able to address this issue. The patch is named db10ecb62ac832c1ed4924556d167efb9bc07fad. It is recommended to upgrade the affected component.

Database specific

{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/5xxx/CVE-2025-5411.json",
    "cna_assigner": "VulDB",
    "cwe_ids": [
        "CWE-79",
        "CWE-94"
    ]
}

References

Affected packages

Git / github.com/mistio/mist-ce

Affected ranges

Type

GIT

Repo

https://github.com/mistio/mist-ce

Events

Introduced

e7a565f818a7217b0c8dba533078abe8c81e9f1f

Fixed

c655e86ac67147a10d0911ea027e3789c4451bf6

Database specific

{
    "source": [
        "AFFECTED_FIELD",
        "CPE_RANGE",
        "REFERENCES"
    ],
    "extracted_events": [
        {
            "introduced": "4.7.0"
        },
        {
            "last_affected": "4.7.0"
        },
        {
            "introduced": "4.7.1"
        },
        {
            "last_affected": "4.7.1"
        },
        {
            "introduced": "0"
        },
        {
            "fixed": "4.7.2"
        }
    ],
    "cpe": "cpe:2.3:a:mist:mist:*:*:*:*:community:*:*:*"
}

Type

GIT

Repo

https://github.com/mistio/mist.api

Events

Introduced

Fixed

db10ecb62ac832c1ed4924556d167efb9bc07fad

Database specific

{
    "source": "REFERENCES"
}

Affected versions

4.*

4.7.0

4.7.1

v4.*

v4.7.0

v4.7.1

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-5411.json"