CVE-2025-59302
Last modified
CVE-2025-59302 is a medium-severity vulnerability rated 4.7/10 on the CVSS scale. In Apache CloudStack improper control of generation of code ('Code Injection') vulnerability is found in the following APIs which are accessible only to admins. * quotaTariffCreate * quotaTariffUpdate * createSecondaryStorageSelector * updateSecondaryStorageSelector * updateHost * updateStorage This issue affects Apache CloudStack: from 4.18.0 before 4.20.2, from 4.21.0 before 4.22.0. Users are recommended to upgrade to versions 4.20.2 or 4.22.0, which contain the fix. The fix introduces a new global configuration flag, js.interpretation.enabled, allowing administrators to control the interpretation of JavaScript expressions in these APIs, thereby mitigating the code injection risk.. EPSS estimates a 0.40% chance of exploitation in the next 30 days.
Description
In Apache CloudStack improper control of generation of code ('Code Injection') vulnerability is found in the following APIs which are accessible only to admins. * quotaTariffCreate * quotaTariffUpdate * createSecondaryStorageSelector * updateSecondaryStorageSelector * updateHost * updateStorage This issue affects Apache CloudStack: from 4.18.0 before 4.20.2, from 4.21.0 before 4.22.0. Users are recommended to upgrade to versions 4.20.2 or 4.22.0, which contain the fix. The fix introduces a new global configuration flag, js.interpretation.enabled, allowing administrators to control the interpretation of JavaScript expressions in these APIs, thereby mitigating the code injection risk.
Metrics
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Apache | Cloudstack | >= 4.18.0.0, < 4.20.2.0 |
| Apache | Cloudstack | 4.21.0.0 |
References
- https://lists.apache.org/thread/kwwsg2j85f1b75o0ht5zbr34d7h66788Mailing List, Vendor Advisory
- http://www.openwall.com/lists/oss-security/2025/11/27/2Mailing List, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2025-59302?
How severe is CVE-2025-59302?
How do I fix CVE-2025-59302?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-59297Delta Electronics DIAScreen lacks proper validation of the u…7.8
- CVE-2025-59298Delta Electronics DIAScreen lacks proper validation of the u…7.8
- CVE-2025-59299Delta Electronics DIAScreen lacks proper validation of the u…7.8
- CVE-2025-5930The WP2HTML plugin for WordPress is vulnerable to Cross-Site…4.3
- CVE-2025-59300Delta Electronics DIAScreen lacks proper validation of the u…7.8
- CVE-2025-59301Delta Electronics DVP15MC11T lacks proper validation of the …7.5
- CVE-2025-59303HAProxy Kubernetes Ingress Controller before 3.1.13, when th…6.4
- CVE-2025-59304A directory traversal issue in Swetrix Web Analytics API 3.1…9.8
- CVE-2025-59305Improper authorization in the background migration endpoints…7.6
- CVE-2025-59307RAID Manager provided by Century Corporation registers a Win…8.4
- CVE-2025-59308In Mahara before 24.04.10 and 25 before 25.04.1, an institut…4.7
- CVE-2025-5931The Dokan Pro plugin for WordPress is vulnerable to privileg…8.8
Are you affected by CVE-2025-59302?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST