{"id":"CVE-2025-71419","published":"2026-09-21T14:17:14.303","lastModified":"2026-09-21T14:17:14.303","description":"UVdesk core-framework before 1.1.7 contains a stored cross-site scripting vulnerability in the SwiftMailer configuration identifier parameter of the createMailerConfiguration action. Attackers with ROLE_AGENT can inject malicious script into the identifier field, which is persisted and executed when other members access the configuration update page.","cvssScore":5.4,"cvssSeverity":"MEDIUM","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","cwes":["CWE-79"],"vendors":[],"products":[],"references":[{"url":"https://github.com/uvdesk/community-skeleton/releases/tag/v1.1.8","tags":[]},{"url":"https://github.com/uvdesk/core-framework","tags":[]},{"url":"https://github.com/uvdesk/core-framework/blob/v1.1.6/Controller/SwiftMailer.php#L38-L46","tags":[]},{"url":"https://github.com/uvdesk/core-framework/blob/v1.1.6/Resources/views/SwiftMailer/manageConfigurations.html.twig#L324","tags":[]},{"url":"https://github.com/uvdesk/core-framework/commit/e5e92d1f5bdb24d1b96751213fb427035736371f","tags":[]},{"url":"https://github.com/uvdesk/core-framework/releases/tag/v1.1.7","tags":[]},{"url":"https://hackmd.io/@leediay/B1Cz5voFGg","tags":[]},{"url":"https://www.vulncheck.com/advisories/uvdesk-core-framework-before-1.1.7-stored-xss-via-swiftmailer","tags":[]}],"exploitRefs":[{"url":"https://github.com/uvdesk/community-skeleton/releases/tag/v1.1.8","tags":[]},{"url":"https://github.com/uvdesk/core-framework","tags":[]},{"url":"https://github.com/uvdesk/core-framework/blob/v1.1.6/Controller/SwiftMailer.php#L38-L46","tags":[]},{"url":"https://github.com/uvdesk/core-framework/blob/v1.1.6/Resources/views/SwiftMailer/manageConfigurations.html.twig#L324","tags":[]},{"url":"https://github.com/uvdesk/core-framework/commit/e5e92d1f5bdb24d1b96751213fb427035736371f","tags":[]},{"url":"https://github.com/uvdesk/core-framework/releases/tag/v1.1.7","tags":[]}],"hasPoc":true,"ai":{"summary":"The flaw allows attackers with ROLE_AGENT to inject malicious scripts via the SwiftMailer configuration identifier parameter, leading to cross-site scripting (XSS) attacks.","exploitability":"Exploitation requires an attacker to have ROLE_AGENT privileges and control over the identifier field; moderate effort is needed.","blast_radius":"If exploited, this could result in unauthorized script execution for other members accessing the configuration update page, potentially leading to data theft or further compromise.","remediation":"Update to UVdesk core-framework version 1.1.7 or later to mitigate the vulnerability.","tags":["xss","auth","web","update"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-09-22T06:25:14.305Z"}}