DEBIAN-CVE-2025-55291

See a problem?
Please try reporting it to the source first.

Source

https://security-tracker.debian.org/tracker/CVE-2025-55291

Import Source

https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2025-55291.json

JSON Data

https://api.osv.dev/v1/vulns/DEBIAN-CVE-2025-55291

Upstream

CVE-2025-55291

Published

2025-08-18T17:15:31Z

Modified

2026-09-01T20:05:54Z

Severity

7.1 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N CVSS Calculator

Summary

[none]

Details

Shaarli is a minimalist bookmark manager and link sharing service. Prior to 0.15.0, the input string in the cloud tag page is not properly sanitized. This allows the tag to be prematurely closed, leading to a reflected Cross-Site Scripting (XSS) vulnerability. This vulnerability is fixed in 0.15.0.

References

https://security-tracker.debian.org/tracker/CVE-2025-55291

Affected packages

Debian:12 / shaarli

Package

Name: shaarli
Purl: pkg:deb/debian/shaarli?arch=source&distro=bookworm

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

0.12.1+dfsg-8+deb12u1

Affected versions

0.*

0.12.1+dfsg-8

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Database specific

source

"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2025-55291.json"

Debian:13 / shaarli