medium5.4
CVE-2025-11146
Reflected Cross-site scripting (XSS) in Apt-Cacher-NG v3.2.1.
Impact
Reflected Cross-site scripting (XSS) in Apt-Cacher-NG v3.2.1. The vulnerability allows an attacker to execute malicious scripts (XSS) in the web management application. The vulnerability is caused by improper handling of GET inputs included in the URL in “/acng-report.html”.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apt-Cacher-Ng Project | Apt-Cacher-Ng | Version 3.2-1 |