CVE-2025-24025 — Coolify Vulnerable to Reflected XSS on Tag Search

CVE-2025-24025

Coolify Vulnerable to Reflected XSS on Tag Search PUBLISHED

Description (CNA)

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to version 4.0.0-beta.380, the tags page allows users to search for tags. If the search does not return any results, the query gets reflected on the error modal, which leads to cross-site scripting. Version 4.0.0-beta.380 fixes the issue.

Affected (CNA)

Vendor / product	Versions
coollabsio / coolify	affected < 4.0.0-beta.361

CWE

CWE-116

References

https://github.com/coollabsio/coolify/security/advisories/GHSA-f2gf-jvmh-vq73

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.