SohuTV CacheCloud CVE-2025-15202

Upgrade SohuTV CacheCloud to a version released after the public issue report at https://github.com/sohutv/cachecloud/issues/374; however, vendor response and patched version availability are not yet confirmed per the vulnerability description. As an interim compensating control, restrict access to the TaskController.java taskQueueList endpoint to trusted administrative networks only by implementing IP-based access controls at the firewall or reverse proxy level. Additionally, enforce Content Security Policy (CSP) headers in the application configuration to block inline script execution even if XSS payloads are injected. Monitor administrator accounts for unusual activity, such as unexpected session creation or API token usage, to detect if exploitation is attempted. Do NOT disable the TaskController entirely if it provides critical caching queue management functionality, as this would impact availability; instead, implement input validation and output encoding at the application level by sanitizing all user-supplied parameters in the taskQueueList function before rendering them in HTML contexts. Note that these controls do not eliminate the vulnerability - a vendor patch is required for complete remediation.