SohuTV CacheCloud InstanceController.java advancedAnalysis cross site scripting_CVE-2025-15173

5.1 / 10

MEDIUM

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P

Description

A weakness has been identified in SohuTV CacheCloud up to 3.2.0. Affected is the function advancedAnalysis of the file src/main/java/com/sohu/cache/web/controller/InstanceController.java. This manipulation causes cross site scripting. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be exploited. The project was informed of the problem early through an issue report but has not responded yet.

Basic Information

ID CVE-2025-15173

Source VulDB

Published Dec 29, 2025 at 05:02

Affected Product

Vendor SohuTV

Product CacheCloud

Version 3.0

Affected Versions SohuTV CacheCloud 3.0
SohuTV CacheCloud 3.1
SohuTV CacheCloud 3.2.0

CWE Classification

CWE-79 CWE-94

References

{
    "lastseen": "",
    "description": "A weakness has been identified in SohuTV CacheCloud up to 3.2.0. Affected is the function advancedAnalysis of the file src/main/java/com/sohu/cache/web/controller/InstanceController.java. This manipulation causes cross site scripting. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be exploited. The project was informed of the problem early through an issue report but has not responded yet.",
    "published": "2025-12-29T05:02:05.724Z",
    "modified": "2025-12-29T05:02:05.724Z",
    "type": "cve",
    "title": "SohuTV CacheCloud InstanceController.java advancedAnalysis cross site scripting",
    "source": "VulDB",
    "references": "https://vuldb.com/?id.338558\nhttps://vuldb.com/?ctiid.338558\nhttps://vuldb.com/?submit.716307\nhttps://github.com/sohutv/cachecloud/issues/369\nhttps://github.com/sohutv/cachecloud/issues/369#issue-3733560985",
    "id": "CVE-2025-15173",
    "bulletinFamily": "",
    "cwe": [
        "CWE-79",
        "CWE-94"
    ],
    "cvelist": null,
    "sourceData": "SohuTV CacheCloud 3.0\nSohuTV CacheCloud 3.1\nSohuTV CacheCloud 3.2.0",
    "sourceHref": "",
    "cvss": {
        "score": 5.1,
        "severity": "MEDIUM",
        "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P",
        "version": "4.0"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "CacheCloud",
    "version": "3.0",
    "vendor": "SohuTV",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}