high8.1
CVE-2025-25477
A host header injection vulnerability in SysPass 3.2x allows an attacker to load malicious JS files from an arbitrary domain which would be executed in the vic…
Impact
A host header injection vulnerability in SysPass 3.2x allows an attacker to load malicious JS files from an arbitrary domain which would be executed in the victim's browser.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Syspass | Syspass | from 3.2.0 through 3.2.11 |