← Database

CVE-2025-21572

MEDIUM CVSS: 6.1 Published: 2025-05-02 Modified: 2026-06-17

Description

OpenGrok 1.13.25 has a reflected Cross-Site Scripting (XSS) issue when producing the history view page. This happens through improper handling of path segments. The application reflects unsanitized user input into the HTML output.

Affected Platforms

Oracle Opengrok

Weakness Type

CWE-79

References