CVE-2025-24967
Last modified
CVE-2025-24967 is a medium-severity vulnerability rated 5.4/10 on the CVSS scale. reNgine is an automated reconnaissance framework for web applications. A stored cross-site scripting (XSS) vulnerability exists in the admin panel's user management functionality. EPSS estimates a 0.26% chance of exploitation in the next 30 days.
Description
reNgine is an automated reconnaissance framework for web applications. A stored cross-site scripting (XSS) vulnerability exists in the admin panel's user management functionality. An attacker can exploit this issue by injecting malicious payloads into the username field during user creation. This vulnerability allows unauthorized script execution whenever the admin views or interacts with the affected user entry, posing a significant risk to sensitive admin functionalities. This issue affects all versions up to and including 2.20. Users are advised to monitor the project for future releases which address this issue. There are no known workarounds.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Yogeshojha | Rengine | <= 2.2.0 |
References
- https://github.com/yogeshojha/rengine/security/advisories/GHSA-23wx-5q5w-334wExploit, Vendor Advisory
- https://github.com/yogeshojha/rengine/security/advisories/GHSA-23wx-5q5w-334wExploit, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2025-24967?
How severe is CVE-2025-24967?
How do I fix CVE-2025-24967?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-24961org.gaul S3Proxy implements the S3 API and proxies requests.…6
- CVE-2025-24962reNgine is an automated reconnaissance framework for web app…8.8
- CVE-2025-24963Vitest is a testing framework powered by Vite. The `__screen…7.5
- CVE-2025-24964Vitest is a testing framework powered by Vite. Affected vers…8.8
- CVE-2025-24965crun is an open source OCI Container Runtime fully written i…8.5
- CVE-2025-24966reNgine is an automated reconnaissance framework for web app…5.4
- CVE-2025-24968reNgine is an automated reconnaissance framework for web app…8.8
- CVE-2025-24969iTop is an web based IT Service Management tool. Prior to ve…5
- CVE-2025-2497A maliciously crafted DWG file, when parsed through Autodesk…7.8
- CVE-2025-24970Netty, an asynchronous, event-driven network application fra…7.5
- CVE-2025-24971DumpDrop is a stupid simple file upload application that pro…9.5
- CVE-2025-24972Discourse is an open-source discussion platform. Prior to ve…4.3
Are you affected by CVE-2025-24967?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST