← Back

Heimdall Application Dashboard

heimdall_application_dashboard

Vendor: Linuxserver • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2025-54597
1Linuxserver
1Heimdall Application Dashboard
Jun 17, 2026
Jul 27, 2025
N/A· v4
6.1 MEDIUM· v3
N/A· v2
LinuxServer.io Heimdall before 2.7.3 allows XSS via the q parameter.
CVE-2022-47968
1Linuxserver
1Heimdall Application Dashboard
Jun 17, 2026
Dec 27, 2022
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Heimdall Application Dashboard through 2.5.4 allows reflected and stored XSS via "Application name" to the "Add application" page. The stored XSS will be triggered in the "Application list" page.