CVE-2025-61949 — LogStare Inc. / LogStare Collector (for Windows)

CVE-2025-61949

LogStare Inc. / LogStare Collector (for Windows) PUBLISHED

Description (CNA)

LogStare Collector contains a stored cross-site scripting vulnerability in UserManagement. If crafted user information is stored, an arbitrary script may be executed on the web browser of the user who logs in to the product's management page.

Affected (CNA)

Vendor / product	Versions
LogStare Inc. / LogStare Collector (for Windows)	affected 2.4.1 and earlier
LogStare Inc. / LogStare Collector (for Linux)	affected 2.4.1 and earlier

CWE

CWE-79

References

https://www.logstare.com/vulnerability/2025-001/
https://jvn.jp/en/jp/JVN77560819/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.