medium6.1
CVE-2025-21572
OpenGrok 1.13.25 has a reflected Cross-Site Scripting (XSS) issue when producing the history view page.
Impact
OpenGrok 1.13.25 has a reflected Cross-Site Scripting (XSS) issue when producing the history view page. This happens through improper handling of path segments. The application reflects unsanitized user input into the HTML output.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Oracle | Opengrok | Version 1.13.25 |