VULNERABILITY INTELLIGENCE
CVE-2025-13488
EPSS probability0.33%
CISA KEVNot currently listed
Published2025-12-04
Last modified2026-10-18
Description
Due to a regression introduced in version 3.83.0, a security header is no longer applied to certain user-uploaded content served from repositories. This may allow an authenticated attacker with repository upload privileges to exploit a stored cross-site scripting (XSS) vulnerability with user context.
Weakness classification
- 103e4ec9-0a87-450b-af77-479448ddef11: CWE-79