CVE-2025-41080 — Multiple vulnerabilities in Seafile

CVE-2025-41080

Multiple vulnerabilities in Seafile PUBLISHED

Description (CNA)

A stored Cross-Site Scripting (XSS) vulnerability has been found in Seafile v12.0.10. This vulnerability allows an attacker to execute arbitrary code in the victim's browser by storing malicious payloads with POST parámetro 'p' in '/api/v2.1/repos/{repo_id}/file/'.

Affected (CNA)

Vendor / product	Versions
Seafile / Seafile	affected 12.0.14

CWE

CWE-79

References

https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-seafile

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.