← Back

Oxidized Web

oxidized_web

Vendor: Oxidized Web Project • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2025-27590
1Oxidized Web Project
1Oxidized Web
Jun 17, 2026
Mar 3, 2025
N/A· v4
9.8 CRITICAL· v3
N/A· v2
In oxidized-web (aka Oxidized Web) before 0.15.0, the RANCID migration page allows an unauthenticated user to gain control over the Linux user account that is running oxidized-web.
CVE-2019-25088
1Oxidized Web Project
1Oxidized Web
Jun 17, 2026
Dec 27, 2022
N/A· v4
5.4 MEDIUM· v3
N/A· v2
A vulnerability was found in ytti Oxidized Web. It has been classified as problematic. Affected is an unknown function of the file lib/oxidized/web/views/conf_search.haml. The manipulation of the argument to_research lea...Show more
A vulnerability was found in ytti Oxidized Web. It has been classified as problematic. Affected is an unknown function of the file lib/oxidized/web/views/conf_search.haml. The manipulation of the argument to_research leads to cross site scripting. It is possible to launch the attack remotely. The name of the patch is 55ab9bdc68b03ebce9280b8746ef31d7fdedcc45. It is recommended to apply a patch to fix this issue. VDB-216870 is the identifier assigned to this vulnerability.Show less