SohuTV CacheCloud TotalManageController.java doTotalList cross site scripting_CVE-2025-15145

4.8 / 10

MEDIUM

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P

Description

A security vulnerability has been detected in SohuTV CacheCloud up to 3.2.0. This affects the function doTotalList of the file src/main/java/com/sohu/cache/web/controller/TotalManageController.java. Such manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet.

Basic Information

ID CVE-2025-15145

Source VulDB

Published Dec 28, 2025 at 17:02

Affected Product

Vendor SohuTV

Product CacheCloud

Version 3.0

Affected Versions SohuTV CacheCloud 3.0
SohuTV CacheCloud 3.1
SohuTV CacheCloud 3.2.0

CWE Classification

CWE-79 CWE-94

References

{
    "lastseen": "",
    "description": "A security vulnerability has been detected in SohuTV CacheCloud up to 3.2.0. This affects the function doTotalList of the file src/main/java/com/sohu/cache/web/controller/TotalManageController.java. Such manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet.",
    "published": "2025-12-28T17:02:05.970Z",
    "modified": "2025-12-28T17:02:05.970Z",
    "type": "cve",
    "title": "SohuTV CacheCloud TotalManageController.java doTotalList cross site scripting",
    "source": "VulDB",
    "references": "https://vuldb.com/?id.338523\nhttps://vuldb.com/?ctiid.338523\nhttps://vuldb.com/?submit.716301\nhttps://github.com/sohutv/cachecloud/issues/365\nhttps://github.com/sohutv/cachecloud/issues/365#issue-3733522215",
    "id": "CVE-2025-15145",
    "bulletinFamily": "",
    "cwe": [
        "CWE-79",
        "CWE-94"
    ],
    "cvelist": null,
    "sourceData": "SohuTV CacheCloud 3.0\nSohuTV CacheCloud 3.1\nSohuTV CacheCloud 3.2.0",
    "sourceHref": "",
    "cvss": {
        "score": 4.8,
        "severity": "MEDIUM",
        "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P",
        "version": "4.0"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "CacheCloud",
    "version": "3.0",
    "vendor": "SohuTV",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}