CVE-2025-11146 — Reflected Cross-site scripting (XSS) vulnerability in Apt-Cacher-NG

CVE-2025-11146

Reflected Cross-site scripting (XSS) vulnerability in Apt-Cacher-NG PUBLISHED

Description (CNA)

Reflected Cross-site scripting (XSS) in Apt-Cacher-NG v3.2.1. The vulnerability allows an attacker to execute malicious scripts (XSS) in the web management application. The vulnerability is caused by improper handling of GET inputs included in the URL in “/acng-report.html”.

Affected (CNA)

Vendor / product	Versions
Apt-Cacher-NG / Apt-Cacher-NG	affected 3.2.1

CWE

CWE-79

References

https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-apt-cacher-ng

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.