SohuTV CacheCloud CVE-2025-15172
LOWSeverity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
XSS requires victim view so UI:R; authenticated as low-privileged user, PR:L.
Primary rating from NVD.
CVSS VectorNVD
Lifecycle Timeline
2DescriptionCVE.org
A security flaw has been discovered in SohuTV CacheCloud up to 3.2.0. This impacts the function preview of the file src/main/java/com/sohu/cache/web/controller/RedisConfigTemplateController.java. The manipulation results in cross site scripting. The attack can be executed remotely. The exploit has been released to the public and may be exploited. The project was informed of the problem early through an issue report but has not responded yet.
AnalysisAI
Cross-site scripting in SohuTV CacheCloud version 3.2.0 and earlier allows remote authenticated attackers with low privileges to inject arbitrary scripts via the preview function of the RedisConfigTemplateController. Public exploit code exists, but the project has not yet released a fix. The EPSS score is very low (0.03%) and no active exploitation is confirmed.
Technical ContextAI
The vulnerability resides in the Java-based CacheCloud application, specifically in the file src/main/java/com/sohu/cache/web/controller/RedisConfigTemplateController.java. The preview function improperly handles user-supplied input, leading to reflected or stored cross-site scripting (CWE-79). The affected product is identified by CPE cpe:2.3:a:sohu:cachecloud:*:*:*:*:*:*:*:*, encompassing all versions up to 3.2.0.
RemediationAI
No vendor-released patch is available. The project was notified via the GitHub issue report but has not responded. As a temporary workaround, restrict access to the preview endpoint of RedisConfigTemplateController by implementing strict authentication and authorization controls, or disable the preview feature entirely if feasible. Note that disabling the feature may hinder legitimate administrative tasks. Monitor the GitHub issue for an official fix.
Oracle Java SE 7 Update 6 and earlier contains multiple sandbox bypass vulnerabilities via the ClassFinder and forName m
Remote code execution in IBM Sterling B2B Integrator, Sterling Integrator, and Tivoli Common Reporting allows unauthenti
Java Runtime Environment sandbox bypass via incorrect image channel verification in 2D component allows remote unauthent
Oracle Java SE JDK/JRE 7 and 6 Update 27 and earlier allows remote code execution with complete system compromise throug
JBoss Seam 2 in Red Hat JBoss EAP 4.3.0 fails to sanitize JBoss Expression Language inputs, allowing remote attackers to
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 up
Multiple vulnerabilities in Oracle Java 7 before Update 11 allow remote attackers to execute arbitrary code by (1) using
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Up
The WLS Security component in Oracle WebLogic Server 10.3.6.0, 12.1.2.0, 12.1.3.0, and 12.2.1.0 allows remote attackers
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allow
Remote unauthenticated attackers can execute arbitrary code on Adobe ColdFusion servers through Java deserialization fla
The ExceptionDelegator component in Apache Struts before 2.2.3.1 interprets parameter values as OGNL expressions during
Same weakness CWE-79 – Cross-site Scripting (XSS)
View allShare
External POC / Exploit Code
Leaving vuln.today