Executive Summary

Informations
Name CVE-2025-25363 First vendor Publication 2025-03-13
Vendor Cve Last vendor Modification 2025-03-19

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
 
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector :
Cvss Base Score N/A Attack Range N/A
Cvss Impact Score N/A Attack Complexity N/A
Cvss Expoit Score N/A Authentication N/A
Calculate full CVSS 2.0 Vectors scores

Detail

An authenticated stored cross-site scripting (XSS) vulnerability in The Plugin People Enterprise Mail Handler for Jira Data Center (JEMH) before v4.1.69-dc allows attackers with Administrator privileges to execute arbitrary Javascript in context of a user's browser via injecting a crafted payload into the HTML field of a template.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-25363

Sources (Detail)

https://github.com/florkie/CVE/blob/main/CVE-2025-25363.md
https://marketplace.atlassian.com/apps/4832/enterprise-mail-handler-for-jira-...
Source Url

Alert History

If you want to see full details history, please login or register.
0
1
Date Informations
2025-03-19 21:20:57
  • Multiple Updates
2025-03-13 21:20:31
  • First insertion