Threats tagged 'ghsa-mq46-9qcm-3xhg'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	10.0	EPSS 0.3%	CVE-2025-11925Incorrect Content-Type Header Critical10.0EPSS 0.3%2025-10-17GCVE DatabaseCVE-2025-11925 A vulnerability exists in BLU-IC2 and BLU-IC4 through version 1.19.5 where an API returns an incorrect Content-Type header (text/html instead of application/json). This misconfiguration may allow injection of HTML or JavaScript into the API response, potentially leading to partial compromise of confidentiality and integrity. EPSS 0.3%Report on CVE-2025-11925 Vulnerability CWE-754 #ghsa-mq46-9qcm-3xhg	GCVE Database	2025-10-17

Page 1 of 1